BRIEFLeakhighP58
Leak of 50,000 records from Colombia's VUCE.gov.co domain
VUCE (Ventanilla Única de Comercio Exterior), Colombia
Detected24 September 2026 · 10:51 UTC
A 50,000-record database tied to Colombia's VUCE foreign-trade government portal (vuce.gov.co) is being traded on a Russian-language forum. It exposes official trade and company information useful for BEC, identity fraud and mapping Colombian state systems. Though posted back in March 2026 it remains a LATAM government data exposure worth tracking.
CategoryLeak
Severityhigh
Priority score58
Detected24 September 2026 · 10:51 UTC
Leak● 58
Base de datos de plataforma china de masajes a domicilio a la ventaA full database from a Chinese on-demand massage platform is offered for sale, covering roughly 7.5 million orders and 1.8 million users. This is a large, structured customer dataset that enables fraud, account takeover and identity theft. Large DB sales like this are a leading source of downstream credential and PII abuse.Leak● 52
Filtración de base de datos del sitio brasileño sinepenopr.com.brActor AnkaTeam leaked a 58,000-record database from the Brazilian site sinepenopr.com.br on TurkHackTeam. The exposed data enables credential stuffing and targeted phishing against Brazilian users. As Brazil is a core LATAM market, defenders should monitor for reuse of these credentials across regional services.Leak● 52
Venta de datos de usuarios alemanes de BinanceA seller is offering German Binance customer data described as '100% active numbers', posted 13 September 2026. Crypto-exchange user data fuels account takeover, phishing and SIM-swap fraud against high-value targets. A recent financial-sector PII leak remains actionable for fraud and CTI teams.Leak● 50
Base de datos de las elecciones de Marruecos publicada en foroA forum user posted a database allegedly tied to Morocco's elections, published today. Election data can enable disinformation, targeting of officials and foreign interference. Although outside LATAM, fresh government election leaks are high-value and should be flagged for monitoring.Leak● 35
Filtración de datos de Grupo Hasar publicada en foroA dumped database tied to Grupo Hasar, a Latin American electronics group, is being shared on DarkForums. The post dates to August 2025, so it is stale and likely already traded, but exposed customer or employee PII could still fuel fraud. Worth tracking for credential reuse.Leak● 55
Base de datos de plataforma china de masajes a la ventaA threat actor is selling a Chinese on-demand massage platform database with roughly 7.5 million orders and 1.8 million users, including names, phone numbers and payment data. Although the victim is outside Latin America, the scale makes it a notable bulk-data sale. Buyers could enable large-scale fraud and downstream phishing.