BRIEFLeakhighP62
Leak of 7 million records from Banco Santander Mexico
Banco Santander México
Detected7 November 2026 · 17:43 UTC
A 7-million-record database attributed to Banco Santander México is being re-shared on DarkForums with a 'new link as requested' note, suggesting reposting of previously circulated data rather than a fresh breach. If authentic, it would contain customer identities and financial details of Mexican banking clients. Even as a repost it remains valuable for credential stuffing, phishing and fraud against the bank's customers.
CategoryLeak
Severityhigh
Priority score62
Detected7 November 2026 · 17:43 UTC
LeakPriority 92
Base de datos del RENIEC de Perú (31M de registros) filtradaA 31-million-record database attributed to Peru's RENIEC, the national civil registry, is being posted for download on DarkForums by user Prymutir. That volume is roughly the country's entire adult population and covers citizen identity data such as names, DNI numbers and addresses. Exposure of a national ID registry enables mass identity theft, fraud and account takeover against citizens and any service relying on DNI verification.LeakPriority 55
Filtración completa de BMW publicada en 13 partesDarkForums user Halvvutir announced on 7 November 2026 a multi-part release described as the complete BMW leak, split into 13 archives. Large automotive-manufacturer dumps often mix internal documents, supplier data and customer records, which can feed business-email-compromise and extortion. The repost nature and contents are unverified, so analysts should sample before treating it as a new breach.LeakPriority 60
Filtración de 539.737 datos del registro civil de Yakarta OrientalA DarkForums post advertises 539,737 records labeled as fresh Dukcapil data for East Jakarta, Indonesia's civil registry, published on 7 November 2026. Civil-registry data typically includes national ID, address and family details, enabling large-scale identity fraud and account opening. Indonesia is not in our priority region but the volume and government source make it worth tracking.LeakPriority 62
Filtración de 689.000 registros de Pajemploi (urssaf.fr) en FranciaDarkForums user Halvvutir posted a 689,000-record data set attributed to Pajemploi, the French URSSAF family-employment service, on 7 November 2026. This is state social-security data covering employers of domestic and childcare staff, highly sensitive for identity fraud and social engineering. Authenticity and field set should be validated before any notification.LeakPriority 66
Base de datos del Ministerio de Salud de Francia (sante.gouv.fr) filtradaDarkForums user metromec posted a data set attributed to sante.gouv.fr, the French Ministry of Health, on 7 November 2026. Government health portals hold sensitive personal and professional records, so any genuine dump raises identity-theft, phishing and regulatory exposure. Record count is not stated in the post, so scope must be verified before notification.LeakPriority 72
Filtración de base de datos de 7,11 millones de registros de GeminiThe DarkForums user Monxulir posted a file described as a 7.11 million-record database linked to Gemini.com, the US crypto exchange, on 7 November 2026. If authentic it would expose customer identity and account data for a regulated exchange, a prime target for phishing, credential stuffing and SIM-swap takeover. Treat size and authenticity as unconfirmed until sampled.