BRIEFLeakhighP46
French pension agency Assurance Retraite database leak
Assurance Retraite
Detected23 September 2026 · 20:51 UTC
A 370,000-record database of Assurance Retraite, a French pension administration, was posted for download. It exposes retirees' personal data. The post dates to March 2026, so it is an older leak rather than a new alert.
CategoryLeak
Severityhigh
Priority score46
Detected23 September 2026 · 20:51 UTC
LeakPriority 50
Filtración de datos del Instituto de Tecnologías Espaciales de PakistánOn November 7, 2026, forum user Ixnovor posted a leak attributed to Pakistan's Institute of Space Technologies on DarkForums. A space/defense-adjacent government institute being targeted is notable for its potential exposure of staff and project data. It is outside the LATAM scope but represents a fresh government-sector leak of interest to CTI teams tracking space and defense supply chains.LeakPriority 58
Filtración de 6 millones de registros de hogares de ChinaA forum user (Quarbivas) posted a 6-million-record dump of Chinese household registration (hukou) data on DarkForums on November 7, 2026. This type of government identity data — names, national IDs and addresses — is high-value for identity fraud and targeting. It falls outside the LATAM focus but is a genuine large government data leak worth tracking.LeakPriority 30
Combolist de credenciales de Perú con 48.000 registrosA 48,000-line email:password combolist tagged for Peruvian domains was posted to DarkForums on 7 November 2026 by user 'megatronishere'. It is a generic credential dump rather than a specific breach, but may contain valid .pe corporate or government logins. Peruvian defenders should screen for domain exposure and reset any matches.LeakPriority 30
Combolist de credenciales de Colombia con 51.000 registrosA 51,000-line email:password combolist tagged for Colombian domains was posted to DarkForums on 7 November 2026 by user 'megatronishere'. It is a generic credential dump rather than a targeted breach, but may contain valid .co corporate or government logins. Colombian defenders should check for domain exposure and reset matched accounts.LeakPriority 40
Volcado de 507 MB de logs de infostealer con credenciales frescasA 507 MB URL:login:password dump generated from infostealer logs dated 5 November 2026 was posted on Cracked.st as fresh 'VIP' material. It aggregates credentials from many victims rather than a single organization, so its value depends on matching your monitored domains. Defenders should screen the dump for their domains and reset any exposed accounts promptly.LeakPriority 35
Combolist de credenciales de México con 74.000 registrosA 74,000-line email:password combolist tagged for Mexican domains was posted to DarkForums on 7 November 2026 by user 'megatronishere'. It is a generic credential dump rather than a breach of a specific organization, but it may contain valid .mx corporate or government logins. Defenders in Mexico should screen for domain exposure and force resets on any matches.