BRIEFLeakhighP42
Leak of 5 million URL:LOG:PASS credential logs
Detected22 September 2026 · 07:01 UTC
A private dump of roughly 5 million URL:LOG:PASS stealer-log credential pairs was posted for distribution. Logs at this scale fuel credential stuffing and account takeover across many services, including webmail, VPN and admin portals. Not region-specific, but the volume makes it a useful hunting source for defenders.
CategoryLeak
Severityhigh
Priority score42
Detected22 September 2026 · 07:01 UTC
Leak● 58
Filtración de base de datos de pasaportes e identidad de IsraelA forum thread claims to distribute a full leaked database of Israeli passports and national identity documents. If authentic, exposure of passport and ID data enables identity fraud, impersonation and targeted attacks against citizens and officials. Defenders should verify the claim and watch for reposts or resale of the dataset.Leak● 55
Mega filtración de 15 TB de documentos clasificados del INSS de IsraelAn actor claims to have exfiltrated and posted 15 TB of classified documents tied to Israel's INSS national-security body, which if authentic is a major state-level leak. Such material can expose intelligence assessments, personnel and defense-adjacent information of strategic value. Although outside the AR-LATAM scope, it is a high-impact government leak worth tracking for regional spillover and source credibility.Leak● 40
Publicados 3 GB de registros de stealer del 21/09/2026A 3 GB set of freshly captured stealer logs (dated 21 Sep 2026) bundling credentials, cookies and session data has been published. Stolen logs like these are directly usable for account takeover and initial access across many organizations. Their freshness makes them operationally dangerous right now.Leak● 44
Filtración de datos de la estatal egipcia de turismo EGOTHData belonging to the Egyptian General Company for Tourism and Hotels (EGOTH), a state-affiliated hospitality group, is being shared as a free download. Exposure of corporate and customer records of a government-linked entity can support fraud and further intrusions. Though outside Latin America, it shows a government-adjacent target leaking.Leak● 52
Filtración de la base de datos de 200.000 clientes de PandaBuysA database of roughly 200,000 PandaBuys customers — names, emails and addresses — is offered for free download. Such PII enables credential stuffing, phishing and account takeover against the affected users. Organizations should watch for downstream abuse of these identities and reused passwords.Leak● 68
Filtración de 219.000 documentos de ciudadanos colombianosA 219,000-record document set of Colombian nationals (part 3 of a Latin America series) is being freely distributed, exposing identity documents and personal data. It targets the Colombian population and can fuel identity fraud and social engineering across the region. LatAm defenders should watch for these records used against banks, telecoms and public services.