BRIEFGov / MilitarycriticalP90
Database leak of Peruvian government officials
Gobierno de Perú (funcionarios públicos)
Detected17 September 2026 · 21:12 UTC
An actor posted a database containing Peruvian government officials' data to an underground forum, apparently freshly uploaded. The dump exposes personal details and potentially credentials of public employees, enabling targeted phishing and impersonation. For defenders of Latin American critical infrastructure, this raises the risk of initial access into government networks.
CategoryGov / Military
Severitycritical
Priority score90
Detected17 September 2026 · 21:12 UTC
Gov / Military● 56
Datos de estudiantes del Ministerio de Educación de Marruecos expuestosData described as belonging to students of Morocco's Ministry of Education is being shared on DarkForums by the user Mirvvuyir. Student records typically include names, dates of birth, school identifiers and contact details, which fuel phishing and identity theft. Education ministries are also attractive targets for disruption and espionage.Gov / Military● 90
Defacement y filtración de la base de datos de SATICA.gob.pe (Perú)A forum user 'cyk', presenting as SoulHemTeam | GrimGroup, posted on Spear Leaks a defacement plus database dump of SATICA.gob.pe, a Peruvian government portal. Compromise of a .gob.pe site signals an exposed web application and likely theft of citizen or staff records; government sites sharing the same stack should be reviewed urgently.Gov / Military● 48
Datos de estudiantes del Ministerio de Educación de Marruecos filtradosDarkForums user Jorzosek posted on 31 October 2026 a dataset described as Moroccan student data from the Ministry of Education. Education records usually contain minors' names, school identifiers and guardian contacts, which are sensitive for identity fraud and social-engineering attacks on families. The volume is not stated and the claim remains unverified.Gov / Military● 58
Filtración de datos del Ministerio de Salud de ChinaDarkForums user Wyrnudor posted on 31 October 2026 a dataset presented as leaked data from China's Ministry of Health. Health ministry records can include personnel, facility and patient-adjacent information, making them attractive for espionage, fraud and further targeting of public health infrastructure. The claim is unverified and a related thread on the National Health Commission appeared the same day.Gov / Military● 60
Filtración de datos del Parlamento de PakistánDarkForums user Jartezon published on 31 October 2026 a dataset described as leaked data from the Parliament of Pakistan. Legislative bodies hold staff, contractor and sometimes security-related records, so exposure can enable targeting of officials and further intrusions into government networks. Confidence in the claim is limited because no sample details were verified in the collected text.Gov / Military● 72
Segundo reporte del defacement y volcado de datos del SATICA de IcaA second DarkForums thread republishes documents and data allegedly taken from SATICA, the tax administration service of Ica, Peru, corroborating the defacement reported the same day on Spear Leaks. Duplicate postings usually accompany data samples meant to prove access, suggesting the operators are seeking attention or buyers for the stolen records. This reinforces that the incident is being actively publicised and that taxpayer data may already be circulating.