BRIEFLeakhighP68
Files and database leak of Libya's state oil corporation
Libya National Oil Corporation
Detected7 October 2026 · 18:07 UTC
A threat actor is offering databases and sensitive internal files belonging to Libya's National Oil Corporation, a state-owned energy operator. As critical national infrastructure, exposed operational, contractual and personnel data could enable espionage, fraud or follow-on intrusion into energy systems. Defenders in energy and government should treat this as a serious state-linked leak.
CategoryLeak
Severityhigh
Priority score68
Detected7 October 2026 · 18:07 UTC
Leak● 68
Filtración de base de datos de PII mexicana de cosmotiendaA Mexican customer PII database allegedly tied to cosmotienda was posted for free on a carding forum in 2026. It likely contains names, contact details and order data of Mexican consumers, fueling fraud, SIM-swap and social engineering. Because it is freely distributed, exposure and downstream abuse risk is elevated for the region.Leak● 72
Base de datos de Uber con 9 millones de registros a la ventaA threat actor claims to be selling a database of uber.com containing more than 9 million records. If genuine, it exposes user account data at scale, enabling credential stuffing, phishing and account takeover against a major global platform. Defenders should treat the listing as a fresh exposure and hunt for reuse of the leaked identities.Leak● 50
Filtración del sistema SCADA de agua de Cargill Meats TailandiaInternal data from the Clear Water Treatment SCADA system at Cargill Meats Thailand's Saraburi plant is being shared on a leak forum. Exposed industrial control documentation can reveal process layouts and weaknesses usable for sabotage or lateral movement. OT/ICS defenders should review exposure and harden remote access.Leak● 62
Filtración de base de datos del Ministerio de Salud de EtiopíaA 13GB dump claiming 4 million facility records from Ethiopia's Ministry of Health (moh.gov.et) is being circulated as PART2. This is a government health-sector database, so the exposure of facilities and related data risks privacy harm and targeting of public health infrastructure. Authorities and sector defenders should verify scope and monitor for reuse.Leak● 33
Filtración de 900.000 extractos bancarios de México (2021)A seller is offering roughly 900,000 bank statements and financial documents from Mexico in a 125GB archive. The data is dated 2021, so it is a stale re-post rather than a fresh breach, but it still contains sensitive financial PII useful for fraud and social engineering against Mexican customers. Value now is mainly historical/triage, not a new alert.Leak● 33
Filtración de datos de 30 millones de ciudadanos iraquíesA dataset covering 30 million Iraqi citizens, dated 2025, is being shared on the DarkNetArmy forum. Although not a fresh alert, its scale makes it a durable resource for identity theft and social engineering. Worth noting for context but low priority compared to recent regional compromises.