BRIEFLeakhighP62
Leak of 845K records from Mexico's state technology universities
Sistema de universidades tecnológicas estatales de México
Detected27 September 2026 · 19:47 UTC
A threat actor on TurkHackTeam is distributing a database dump of roughly 845,000 records from Mexico's public state technology university system. The leak exposes student, staff and institutional data linked to public education in LATAM, enabling phishing, credential stuffing and identity fraud. Defenders in Mexico's public sector should verify the breach and force credential resets.
CategoryLeak
Severityhigh
Priority score62
Detected27 September 2026 · 19:47 UTC
Leak● 44
Venta de la base de datos de 100M usuarios de BumbleA seller is offering a claimed 100M-record database from the Bumble dating app, comprising real-user PII. Although the thread dates from mid-2026 (not a fresh alert), a dataset of this size still enables credential stuffing, phishing and account-takeover against Bumble users. Worth tracking for downstream banking/fintech customers who reuse these credentials.Leak● 33
Filtración de bases de datos de tres empresas turísticas turcasLeaked databases from three Turkish travel/tourism websites are being advertised on a leak forum, exposing customer and booking data from small regional operators. The scale is limited and the victims are outside Latin America, so direct impact for AR-LATAM defenders is low. It is still relevant as a reminder that sector vendors and booking platforms can leak PII used for targeted fraud.Leak● 42
Publicación de un millón de registros URL:LOG:PASS de stealer logsA dump of roughly one million URL:LOG:PASS credential records harvested by infostealers is being freely shared across multiple leak forums. This is unstructured but very large and fresh, exposing live session URLs and plaintext logins that feed account takeover and VPN/SSO abuse. Defenders should treat it as a broad credential hygiene alert, especially for any reused corporate or government emails.Leak● 62
Filtración de la base de datos del Ministerio de Educación de MarruecosA database belonging to Morocco's Ministry of Education is being distributed on BreachForums, exposing government records tied to a national education authority. If confirmed, this is a public-sector breach affecting student and citizen data, useful for identity theft and targeting public employees. Government and education defenders should watch for credential reuse and phishing built on this data.Leak● 42
Filtración de datos de Banc Certified (banccertified.com)A database belonging to Banc Certified Merchant Services (banccertified.com), a payment/merchant-services provider, has been leaked and is offered for download. Breach of a financial-services firm can expose customer and transaction data usable for card fraud. Merchant-services defenders should monitor for downstream phishing, card fraud and credential stuffing.Leak● 46
Colección de 480 volcados SQL (9 GB) filtradaA 9 GB archive containing 480 SQL dumps reportedly taken from multiple organizations (e.g., esac.sk, osme.es, aba.ae, aepaa.pt) has been published. The volume and mixing of sources indicate broad database exfiltration or aggregation, exposing user records and credentials. Defenders whose domains appear should assume compromise, rotate credentials and audit for reuse.