BRIEFLeaklowP22
Database leak of Canada's OnSite Locates Inc
OnSite Locates Inc
Detected16 September 2026 · 18:12 UTC
A database dump attributed to Canada's OnSite Locates Inc is being redistributed on a leak forum, exposing company and likely client/contact records. The thread is dated June 2024, so this is a stale repost rather than a fresh breach. Low priority for the region; relevant only to parties with a Canadian third-party relationship.
CategoryLeak
Severitylow
Priority score22
Detected16 September 2026 · 18:12 UTC
Leak● 26
Reaparece base de datos de 419 millones de InstagramA 419 million-record Instagram dataset reappeared on BreachForums on 16 September 2026, most likely a repackaged older scrape rather than a new incident. Such large identity/credential sets still feed credential stuffing and OSINT, but this is a recycled leak, not a fresh compromise.Leak● 42
Filtración de la base de datos completa de NowVerticalA full database of NowVertical, a data-analytics and data-brokerage firm, was offered on BreachForums on 16 September 2026. Firms of this type aggregate sensitive business and client data, so a leak can expose partner identities and credentials usable for targeted intrusion.Leak● 45
Venta de la base de datos completa de better.org.ukA seller posted the full database of the UK leisure operator better.org.uk on 09 September 2026. A complete dump of a real membership organisation enables phishing and credential-reuse attacks against staff and members, so it is worth monitoring even outside the region.Leak● 52
Presunta brecha de GameStop expone 56 millones de registrosA BreachForums thread discusses an alleged GameStop data breach exposing more than 56 million customer records. If verified, the dataset carries customer PII that fuels phishing and credential-stuffing, so defenders should watch for account-takeover and fraud campaigns built on it.Leak● 44
Filtración de base de datos del departamento de economía de la Academia Kyiv-MohylaA database belonging to the economics department of Ukraine's Kyiv-Mohyla Academy (economics.ukma.edu.ua) has been posted on a raid forum, likely with staff and student personal data and credentials. The post dates to mid-2026, so it is not fresh. It is outside Latin America but remains a real education-sector breach worth tracking for credential reuse.Leak● 68
Venta de volcado completo de la plataforma de datos Woflow (12M registros)A full dump of Woflow, a US AI-driven merchant data platform, containing roughly 12 million records, is being offered on a raid forum in 2026. Merchant and business contact data at this scale fuels targeted phishing, account takeover and B2B invoice fraud. Defenders in e-commerce/payments should treat the dataset as live and hunt for credential reuse.