BRIEFLeakhighP58
6 million Chinese household registration records leaked
China household registration (hukou) data
Detected7 November 2026 · 21:43 UTC
A forum user (Quarbivas) posted a 6-million-record dump of Chinese household registration (hukou) data on DarkForums on November 7, 2026. This type of government identity data — names, national IDs and addresses — is high-value for identity fraud and targeting. It falls outside the LATAM focus but is a genuine large government data leak worth tracking.
CategoryLeak
Severityhigh
Priority score58
Detected7 November 2026 · 21:43 UTC
LeakPriority 50
Filtración de datos del Instituto de Tecnologías Espaciales de PakistánOn November 7, 2026, forum user Ixnovor posted a leak attributed to Pakistan's Institute of Space Technologies on DarkForums. A space/defense-adjacent government institute being targeted is notable for its potential exposure of staff and project data. It is outside the LATAM scope but represents a fresh government-sector leak of interest to CTI teams tracking space and defense supply chains.LeakPriority 30
Combolist de credenciales de Perú con 48.000 registrosA 48,000-line email:password combolist tagged for Peruvian domains was posted to DarkForums on 7 November 2026 by user 'megatronishere'. It is a generic credential dump rather than a specific breach, but may contain valid .pe corporate or government logins. Peruvian defenders should screen for domain exposure and reset any matches.LeakPriority 30
Combolist de credenciales de Colombia con 51.000 registrosA 51,000-line email:password combolist tagged for Colombian domains was posted to DarkForums on 7 November 2026 by user 'megatronishere'. It is a generic credential dump rather than a targeted breach, but may contain valid .co corporate or government logins. Colombian defenders should check for domain exposure and reset matched accounts.LeakPriority 40
Volcado de 507 MB de logs de infostealer con credenciales frescasA 507 MB URL:login:password dump generated from infostealer logs dated 5 November 2026 was posted on Cracked.st as fresh 'VIP' material. It aggregates credentials from many victims rather than a single organization, so its value depends on matching your monitored domains. Defenders should screen the dump for their domains and reset any exposed accounts promptly.LeakPriority 35
Combolist de credenciales de México con 74.000 registrosA 74,000-line email:password combolist tagged for Mexican domains was posted to DarkForums on 7 November 2026 by user 'megatronishere'. It is a generic credential dump rather than a breach of a specific organization, but it may contain valid .mx corporate or government logins. Defenders in Mexico should screen for domain exposure and force resets on any matches.LeakPriority 52
Presunta filtración de base de datos nuclear de IránOn 7 November 2026 the DarkForums user 'santiagotaponero' posted a thread claiming to leak a database tied to Iran's nuclear energy sector. Scale and authenticity are unverified and such claims are often inflated, but a genuine leak would carry serious critical-infrastructure and geopolitical implications. Analysts should treat it as an unconfirmed but high-profile claim pending validation.