BRIEFLeakhighP73
Leak of 845K records from Mexico's state technology universities
Universidades tecnológicas estatales de México
Detected28 September 2026 · 22:07 UTC
A dump of roughly 845,000 records tied to Mexico's state technological universities is circulating on a hacking forum. Exposure of student, staff and likely credential data enables phishing, credential stuffing and lateral movement into academic networks. It is a regional government-education leak that warrants validation against Mexican education systems.
CategoryLeak
Severityhigh
Priority score73
Detected28 September 2026 · 22:07 UTC
LeakPriority 66
Filtración de base de datos de 12,11M de GeminiA 12.11 million-record database attributed to crypto exchange Gemini was posted on DarkForums by user Darkiros687 in the Databases section. If authentic, it exposes customer PII and account identifiers, enabling targeted phishing, account takeover and regulatory exposure. Crypto exchange users are high-value targets for credential and wallet-draining attacks.LeakPriority 48
Filtración de 593K cuentas de Netplaygo en BrasilA dataset of roughly 593,000 records belonging to Netplaygo, a Brazilian online gaming/entertainment platform, was published for download on the SpyHackerz forum by user C0Ld in late June 2026. The dump exposes customer account data usable for credential stuffing and phishing against Brazilian users. Though not government-linked, it is a sizable regional leak worth monitoring.LeakPriority 72
Filtración de datos del contratista del DoD Bristol IndustriesThe Settea group published data allegedly stolen from Bristol Industries LLC, a U.S. Department of Defense contractor managing FUDS program records that include controlled unclassified information, coordinates of thousands of military sites, and chemical-weapons burial data. This is among the most sensitive victims in the batch and could support reconnaissance or targeting. Defense supply-chain partners should treat it as a priority exposure.LeakPriority 53
Filtración del sistema SYRIF del Banco Central de GuineaA DarkForums thread advertises data allegedly from the SYRIF system of the Central Bank of the Republic of Guinea (BCRG), a core financial infrastructure component. If genuine, exposure of central bank systems is high impact for the country's financial sector and payment flows. The post date is unclear, so authenticity and freshness must be verified before acting.LeakPriority 60
Filtración de datos de la aseguradora Ahorra SegurosA threat actor using the handle 'blasphemus' published on DarkForums a database reportedly belonging to Ahorra Seguros containing roughly 25,000 records, dated November 2026. The leak exposes customer data of a Spanish-speaking insurance company and could fuel fraud and targeted phishing. Treat affected customers' personal data and credentials as compromised.LeakPriority 40
Base de datos del dominio gubernamental francés osmose.numerique.gouv.fr filtradaA RaidForums thread offers for free a database apparently tied to the French government domain osmose.numerique.gouv.fr, a .gouv.fr service. If current, exposure of public-sector records is significant for French government defenders. The thread appears to originate from older RaidForums activity, so treat it as likely stale but verify scope and recency.