7 million records from Santander Mexico leaked on DarkForums

Santander México

Detected1 November 2026 · 21:24 UTC

Why it matters

A DarkForums post republishes with a new link a database attributed to Santander México containing roughly 7 million customer records, indicating the data remains openly available. Banking KYC data at this scale enables account takeover, social engineering and fraud against customers across Mexico. Defenders at financial institutions in the region should treat it as a confirmed exposure and check for credential reuse.

MetadataRECORD

CategoryLeak

Severitycritical

Priority score85

Detected1 November 2026 · 21:24 UTC

Related items6

Leak● 55

Filtración de 100.000 registros de múltiples sitios web mexicanosActor 'Lvrimer' is offering over 100,000 records reportedly scraped from multiple Mexican websites on DarkForums. The dataset likely aggregates user accounts, emails and personal details from several local platforms. It raises credential-stuffing and phishing risk for Mexican consumers and the operators of the affected sites.

27m

Leak● 68

Base de datos de 600.000 registros argentinos a la ventaActor 'Kruxx' posted a 600,000+ record Argentina dataset on DarkForums on 1 November 2026. The records are not tied to a single named organization, suggesting an aggregated dump from local services or e-commerce. Defenders should triage for emails, hashed passwords and DNI data to detect credential-stuffing exposure.

27m

Leak● 90

Filtración del Registro Electoral argentino con 11 millones de datosActor 'Gillulox' is advertising an 11-million-record dataset labeled as Argentina's 2026 electoral registry on DarkForums. If genuine, it exposes DNI, addresses and voter data for a large share of the adult population. Such leaks enable identity fraud, targeted phishing and disinformation campaigns against citizens and state bodies.

27m

Leak● 45

Filtración de datos personales del Gobierno de PakistánA DarkForums post dated 1 November 2026 by user 'Lyklekor' claims a leak of Pakistani government personal data. The specific agency, record volume and fields are not described, limiting immediate verification. It still signals continued posting of government citizen data on the same forum where regional leaks are traded.

Leak● 50

Base de datos mexicana a la venta en DarkForums (Dr4k7h Ali)A DarkForums thread dated 1 November 2026 by user 'LIVOR' advertises a database of Mexican data credited to 'DR4K7H ALI'. The affected organization, record count and data fields are not disclosed, so impact cannot be confirmed from the listing alone. Given the LATAM focus, the file should be obtained and sampled to identify the victim organization and data classes.

Leak● 55

Filtración de datos del Ministerio de Trabajo y Bienestar de IránA DarkForums post offers a downloadable dump attributed to Iran's Ministry of Cooperatives, Labour and Social Welfare, a government body holding employment, welfare and citizen records. The volume is not stated in the listing, but ministry datasets typically include national identifiers and benefit data. Regional analysts should track it as an example of government data monetisation on the same forum.