BRIEFLeakhighP48
Betting platform 1win database offered for sale
1winbet
Detected17 September 2026 · 23:12 UTC
A database allegedly belonging to the betting platform 1win (1winbet) is being leaked on an underground forum. Gambling platforms hold account, payment and KYC data of many users, so a leak of this kind enables fraud, credential stuffing and identity theft against a broad Spanish-speaking user base.
CategoryLeak
Severityhigh
Priority score48
Detected17 September 2026 · 23:12 UTC
Leak● 46
Base de datos de ciudadanos de República Dominicana a la ventaAn actor claims to hold a citizens database of the Dominican Republic, potentially containing names, national IDs and other PII of a whole national population. It matters to LATAM defenders, but the post is dated February 2026, so it is likely a recirculated dump rather than a fresh breach.Leak● 62
Filtración de 1M de datos PII de la firma de transferencias mtglobalA seller is offering roughly 1 million PII records belonging to mtglobal.org, a UK-based international money transfer firm, likely including customer identity and KYC data. Finance-sector defenders should care because such records fuel account takeover, targeted phishing and fraud against the provider and its clients.Leak● 40
Volcado de 10 millones de URL:LOG:PASS con credenciales a la ventaA 10-million-line stealer-log set (URL:LOG:PASS) is being distributed, exposing browser-saved credentials together with the sites they belong to. Dumps like this enable credential stuffing against webmail, VPN and admin portals, so any organisation relying on password-only authentication is exposed. Posted in May 2026, it is somewhat stale yet still widely reused by attackers.Leak● 48
Filtración de una base de datos de Instagram con 17 millones de registrosA 17-million-record Instagram database is being circulated as a fresh leak, exposing account identifiers and possibly credentials. Instagram data has leaked repeatedly, so authenticity and freshness are uncertain, but a dump this size can feed credential stuffing and account takeover at scale. Defenders should enforce MFA on any corporate accounts linked to Instagram.Leak● 55
Filtración de la base de datos del municipio de Yehud-Monosson (Israel)A 135 MB database belonging to the Yehud-Monosson municipality in Israel was posted for download on a leak forum. It reportedly contains municipal records, potentially including resident and employee data. Although outside Latin America, municipal breaches like this fuel identity fraud and can expose government credentials useful for downstream attacks.Leak● 48
Filtración de datos de Bijak.in con muestra de la aerolínea VolarisA ~308K-record database tied to Bijak.in was shared, including phone numbers, IPs and names, with a free sample referencing Volaris.com. Volaris is a major Mexican airline, so the sample points to a LATAM transport entity being affected. Such contact data enables targeted phishing and SIM-swap fraud against customers and staff.