BRIEFLeakhighP82
Leak of 72 million Brazilian fiscal records
Brasil (datos fiscales/CPF)
Detected18 October 2026 · 21:39 UTC
A 72-million-record dataset described as Brazilian personal and fiscal (tax/CPF) information is being shared for download. Fiscal identifiers and personal data at this scale fuel identity theft, credit fraud and targeted social engineering across Brazil. Defenders and fraud teams should treat it as a mass PII exposure and monitor for downstream abuse.
CategoryLeak
Severityhigh
Priority score82
Detected18 October 2026 · 21:39 UTC
Leak● 66
Filtración de base de datos de la utility AES Indiana (3,2M filas)A BreachForums post offers a database for aesindiana.com, a US electric utility, reportedly containing about 3.28 million data rows and 328,263 email addresses. Utilities are critical infrastructure, making exposure of customer/operational emails valuable for phishing and BEC. Even outside LATAM, this is a large dataset tied to a real critical-infrastructure operator and deserves review.Leak● 38
Filtración de código fuente y datos de SmartGPS (Brasil)A DarkForums thread advertises leaked source code and data from SmartGPS, a Brazilian GPS/tracking service (smartgps.com.br). The post is dated January 2026, so it is roughly nine months old and not a fresh alert. Still relevant for LATAM defenders given tracking/telemetry data and code exposure, but low urgency now.Leak● 50
Paquete privado de 75 millones de credenciales ULP a la ventaA seller is offering a private 75-million-line URL:LOGIN:PASSWORD stealer-log bundle dated today, indicating very large fresh credential exposure. It is not tied to a single named victim but fuels credential stuffing against web logins across many organizations. Defenders should treat it as a fresh corpus for password-reuse and session-hijack risk, and prioritize MFA and credential resets.
Leak● 60
Filtración de 650.000 registros del proveedor peruano Hosting PerúA dump claiming more than 650,000 records from the Peruvian hosting provider Hosting Perú is being distributed on DarkForums. Hosting providers aggregate customer accounts, support tickets and possibly billing and credential data, so the blast radius extends to every client hosted on the platform. Peruvian businesses and public-sector sites hosted there should rotate credentials and check for reuse; the post date is not evident in the thread, so recency must be confirmed.Leak● 80
Filtración de datos del Seguro Social Universitario de La PazA database attributed to Bolivia's Seguro Social Universitario de La Paz is being released simultaneously across RaidForums, DarkForums and BreachForums under the same handle, indicating an active, coordinated publication. Health and social-security entities hold medical, affiliation and identity data of insured members, which is highly sensitive and enables fraud and extortion. The multi-forum reposting within minutes points to a live incident worth immediate validation with the entity.Leak● 41
Filtración de 850 millones de registros de Hi-Tek (India)A dataset claiming 850 million records tied to India's Hi-Tek is circulating for download, dated July 2026. At this scale it represents a major bulk PII exposure, though it is now several months old and outside the AR-LATAM region. It is useful mainly for credential/PII correlation rather than as a fresh alert.