BRIEFLeaklowP38
Argentine email and CUIL/CUIT database leak
Detected22 September 2026 · 23:43 UTC
A threat actor posted a database containing Argentine email addresses plus CUIL/CUIT national tax identifiers, unique to each citizen. Though dated October 2025 and thus not fresh, such data enables identity fraud, SIM-swap and account takeover. Argentine defenders should check exposure of their user base.
CategoryLeak
Severitylow
Priority score38
Detected22 September 2026 · 23:43 UTC
LeakPriority 40
Conjunto de bases de datos de dominios .es de España ofrecido en foroA DarkForums user (Lurlevas) posted a bundle described as 'Spain .es databases' on November 7, 2026. The post gives no scale, source or named victim, so it may be an aggregation of previously leaked Spanish site data rather than a fresh breach. It is worth monitoring for Spanish organizations but carries low confidence without further detail.LeakPriority 48
Filtración de base de datos de CoinTrackerA DarkForums user (Pexvumen) posted a CoinTracker database leak on November 7, 2026. CoinTracker handles crypto portfolio and tax data tied to wallets and exchanges, so exposure raises risks of wallet-targeted phishing and financial fraud. Crypto users are frequently hit by targeted social engineering after such leaks.LeakPriority 48
Filtración de base de datos de CrunchbaseA DarkForums user (alex7646) posted a Crunchbase database leak on November 7, 2026. Crunchbase holds business and contact data on companies, investors and executives worldwide, making it useful for business-email-compromise and targeted phishing. The leak is not regional to LATAM but is a sizeable corpus of corporate intelligence.LeakPriority 52
Filtración de base de datos de sahibinden.com (Turquía)A DarkForums user (bunnybunny) posted a sahibinden.com database leak on November 7, 2026. Sahibinden is Turkey's largest classifieds marketplace, so a genuine leak would expose a very large pool of user accounts and contact data. Even partial data enables phishing, smishing and account fraud against millions of Turkish users.LeakPriority 54
Base de datos del banco FCI filtradaA DarkForums user (nytrox) posted a leaked FCI Bank database on November 7, 2026. Banking data leaks expose account holders and financial details that feed fraud and account-takeover campaigns. The entity's country is not stated, so affected customers and the bank should validate scope promptly.LeakPriority 56
Base de datos del club de lujo La Reserva Sotogrande (España) con clientes adinerados a la ventaA seller on DarkForums is offering the 2026 database of La Reserva Club Sotogrande, a high-end golf and residential club in Spain, claiming data on wealthy clients. Records for affluent individuals are prime material for targeted phishing, extortion and fraud. The Spanish-language setting and clientele make this especially relevant for Iberian and LATAM fraud watchers.