BRIEFLeakhighP50
Leak of 845,000 records from Mexico state technology universities
Sistema de universidades tecnológicas estatales de México
Detected28 September 2026 · 11:48 UTC
A dump of roughly 845,000 records tied to Mexico's state technological university system is circulating on TurkHackTeam, exposing student, staff and/or credential data from Mexican public higher-education institutions. Government-affiliated education networks in Latin America are frequently abused for credential stuffing, targeted phishing and lateral movement into connected state services, so this data can be weaponised against public-sector accounts.
CategoryLeak
Severityhigh
Priority score50
Detected28 September 2026 · 11:48 UTC
Leak● 62
Filtración de datos del mayor hospital militar de Arabia SauditaA threat actor posted data allegedly belonging to Saudi Arabia's largest military hospital on RaidForums/BreachForums on 28 Sept 2026. Leaks from military medical facilities are highly sensitive, combining patient, personnel and potentially operational data, and indicate deliberate targeting of defence-adjacent healthcare infrastructure worth tracking for regional and sectoral risk.Leak● 55
Base de datos de la empresa estadounidense Portoro a la ventaA database belonging to Portoro, a US vacation-rental management firm, was posted for sale on DarkForums and mirrored on BreachForums on 28 Sept 2026, likely containing customer and possibly internal records. Fresh corporate database leaks of this kind directly fuel account takeover, phishing and payment fraud against the company's clients and staff, and the twin postings suggest active monetisation.Leak● 18
Base de datos de zayonwoodenwatches.com con datos de AWS y StripeA database from e-commerce site zayonwoodenwatches.com, including AWS and Stripe-related data, is being shared on DarkForums. Cloud and payment credentials raise the risk of financial fraud and further infrastructure compromise. The item lacks a date and record count, limiting its current relevance.Leak● 28
Filtración de base de datos del foro español ForocochesA database dump of the large Spanish forum Forocoches has surfaced on DarkForums, affecting one of Spain's biggest online communities. Exposed account data enables credential-reuse attacks and account takeovers across other services. It is labelled a 'small' dump and dated 2025, so it is not a fresh alert.Leak● 20
Base de datos del sitio escolar indonesio sman1gondang.com filtradaA database belonging to the Indonesian school website sman1gondang.com has been published on DarkForums, exposing data tied to a real educational institution. Such leaks enable credential stuffing and harassment campaigns against staff and students. The record count is not disclosed and the post is several months old, lowering its urgency.Leak● 28
Base de datos de la firma india Aditya Kaushik & Associates a la ventaThe private database of Indian chartered accountancy firm Aditya Kaushik & Associates is being shared on DarkForums, exposing client identities and financial records of a real business. Although outside the LATAM region, leaked accounting data fuels invoice fraud and targeted phishing against the firm's clients. The record count is unstated, so the true impact cannot be measured.