BRIEFLeaklowP42
sdmtponorogo.com database leak (250K records)
sdmtponorogo.com
Detected25 September 2026 · 20:48 UTC
Reposts collapsed2
TurkHackTeam's AnkaTeam is publishing a 250K-record database allegedly taken from sdmtponorogo.com, an Indonesian website. While not a high-value government target, it is a named organisational breach with real user records that fuels credential stuffing and phishing. Useful mainly as a signal of ongoing regional hacktivist leak activity.
CategoryLeak
Severitylow
Priority score42
Detected25 September 2026 · 20:48 UTC
LeakPriority 48
Filtración de base de datos de la cadena de gimnasios FitnessParkOn DarkForums, user metromec is offering a database of the French gym chain FitnessPark, reportedly covering millions of customer records. Member databases typically include names, contact details and account data useful for credential stuffing and targeted phishing. Although outside Latin America, the scale makes it relevant for fraud and account-takeover monitoring.LeakPriority 52
Filtración de la base de datos del exchange GeminiA large database attributed to the crypto exchange Gemini is advertised on DarkForums by user Lertozon, reportedly covering millions of records. Exchange customer data is high value for account-takeover, targeted phishing and draining of crypto wallets. Fraud and financial-crime teams should treat it as a credible exposure until the data is verified.
LeakPriority 95
Filtración de base de datos del Banco Central de la República Argentina (BCRA)A threat actor is advertising on BreachForums a database attributed to the Banco Central de la República Argentina (BCRA), the country's central bank and monetary authority. Any exposure of central-bank data touches financial supervision, payment infrastructure and public confidence in the banking system. Argentine defenders should verify the authenticity and scope immediately, as this is the single highest-impact item for the region.LeakPriority 62
Filtración de 9,11 millones de registros de la CAF de FranciaA DarkForums post from 9 November 2026 offers a 9.11-million-record dataset attributed to caf.fr, France's family benefits agency. CAF holds beneficiary identity, income and household composition data, which is high value for benefit fraud, targeted phishing and identity theft. The figure and the packaging suggest the file may be recycled from earlier leaks, so French public-sector and banking fraud teams should confirm exposure before acting.LeakPriority 73
Base de datos del municipio de Playa del Carmen a la ventaOn 9 November 2026 the user 'arcepah' listed a Mexican database labelled 'Playa del Carmen' in DarkForums' leaked-databases section. It appears to be a local-government dataset from the Solidaridad municipality in Quintana Roo, although the thread content and record count are not fully visible. Municipal resident, permit and service data fuels extortion, phishing and fraud against citizens, so local authorities should verify the claim.LeakPriority 82
Filtración de 2 millones de registros del sistema SIPI de la SIC de ColombiaOn 9 November 2026 a DarkForums post advertised more than 2 million records from Colombia's SIC SIPI system, offering a free CSV sample and paid full access. SIC is the national industry and commerce superintendency and SIPI holds industrial-property filings with company, representative and contact data. The exposure enables business email compromise, trademark fraud and impersonation of registered firms, so Colombian companies and the regulator should watch for reuse.