Ecuador Civil Aviation database published after hack

Aviación de Ecuador

Detected10 September 2026 · 22:12 UTC

Reposts collapsed2

Why it matters

A second BreachForums thread titled 'La Aviación de Ecuador ha caído' publishes the Ecuadorian civil aviation authority database, following the same-day claim against aviacioncivil.gob.ec. This confirms an active, recent compromise of LATAM government aviation infrastructure with a dumped dataset. Analysts should assess scope (records, credentials) and notify the affected entity and regional CERTs promptly.

MetadataRECORD

CategoryLeak

Severityhigh

Priority score91

Detected10 September 2026 · 22:12 UTC

Related items6

Leak● 44

Base de datos de 5,8 GB de Camboya ofrecida en un foroAn onion forum thread offers what appears to be a large (about 5.8 GB) Cambodia-focused database labeled CADT/IDT, with a second part also posted. Datasets of this size tied to a country often bundle personal and organizational records valuable for fraud and account takeover. Cambodia-based organizations and regional analysts should validate the contents before it spreads further.

23m

Leak● 46

Filtración de la base de datos de Taly.io anunciadaA thread on an onion forum announces a database leak of Taly.io, though the volume and record types are hidden behind a login wall. Any confirmed leak of a live web service exposes user accounts and customer data usable for fraud and account takeover. Analysts should obtain a sample to confirm scope and record types before alerting the entity.

23m

Leak● 50

Filtración de datos del marketplace taiwanés PopchillA dark web forum post advertises a dumped dataset from Popchill.com, a Taiwanese second-hand marketplace, reportedly around 207,857 records. Customer account and order data from an e-commerce platform fuels credential stuffing, phishing and payment fraud against users. The company and its Taiwanese user base should monitor for downstream account takeover.

23m

Leak● 88

Filtración de base de datos de más de 200 municipios argentinosA BreachForums actor is advertising the 'institucional.municipalidad.com' database covering more than 200 Argentine municipalities, exposing institutional records from local government portals. A single leak spanning hundreds of municipal governments carries high risk of citizen-data exposure, credential abuse and targeted phishing against public-sector staff. Argentine local governments should treat this as an active breach and assess scope urgently.

23m

Leak● 42

Enlace activo a la filtración de datos de Serasa Experian (Brasil)DarkForums user 'Uldnemor' shared a working download link for a dataset attributed to the Brazilian credit bureau Serasa Experian, which corresponds to an older, previously circulating breach rather than a new incident. The data concerns millions of Brazilian consumers and includes identifiers used in credit fraud, so defenders still care about its reuse. Because it is a re-share of stale material, it is not a fresh alert but remains relevant for fraud and identity monitoring.

Leak● 58

Base de datos y acceso admin del portal gubernamental bppra.gob.pkDarkForums user 'Yilcomol' posted, minutes before collection, a database plus administrative access belonging to bppra.gob.pk, a Pakistani government domain. Selling or leaking admin access to a .gov portal allows tampering with published content and direct access to citizen data behind it. Although outside Latin America, it is a concrete government access compromise worth recording for cross-regional tracking.