BRIEFLeakhighP50
Customer database leak at Serbian insurer Sava Osiguranje
Sava Osiguranje (Serbia)
Detected20 October 2026 · 13:39 UTC
A threat actor posted a customer database belonging to Sava Osiguranje, a Serbian insurance company, on a leak forum minutes ago. Insurance customer records typically include names, policy details, contact and payment data that fuel fraud, phishing and account takeover. Even outside LATAM, a fresh leak from a regulated financial-sector firm is worth monitoring for downstream abuse.
CategoryLeak
Severityhigh
Priority score50
Detected20 October 2026 · 13:39 UTC
Leak● 45
Base de datos de 11 millones de cuentas de Poshmark en circulaciónAn 11 million line Poshmark email:password dataset is circulating in an exchange thread that appears to be aged rather than a fresh breach. Credentials enable credential-stuffing against Poshmark and, through reuse, other accounts. Because the thread looks stale, value is mostly baseline fraud intelligence rather than a new incident.Leak● 50
Filtración de la red Ram Dor, filial del grupo israelí ToupA threat actor claims to have infiltrated the network of Ram Dor, a subsidiary of Israel's Toup Group, and is publishing a database from the intrusion. The dump may expose internal systems and customer records of the conglomerate. This matters for supply-chain and regional market awareness even though it is not in Latin America.Leak● 60
Base de datos de 16 millones de registros de Punjab a la ventaAn actor is selling a 16 million record dataset allegedly from the Punjab Land Records Authority, a Pakistani government body holding citizen land and identity records. Government land registries enable identity theft, property fraud and impersonation of officials. The scale and official nature justify monitoring despite being outside LATAM.Leak● 64
Filtración de 36 millones de registros de usuarios de EviteA 36 million record dataset attributed to Evite, a US online invitations service, is being offered for sale in a recently posted thread. Such dumps typically include emails, names and account metadata that fuel phishing, credential stuffing and spam campaigns. Large fresh consumer datasets are high-value for downstream account-takeover chains.Leak● 72
Base de datos de 16M de registros del catastro de Punjab a la ventaA seller is offering a 16 million record database from the Punjab Land Records Authority, a Pakistani government body that holds citizens' property and ownership data. Leaked land records expose identity, property and financial details that enable large-scale fraud and targeted extortion against owners. The listing is fresh, showing the data is being actively marketed to buyers right now.Leak● 68
Filtración de 780K registros de Brasil, parte 1 del lote de América LatinaA forum actor is releasing a 780K-record Brazilian dataset explicitly framed as the first part of a Latin America collection, meaning further country batches (possibly Argentina) are likely to follow. Consumer and possibly corporate PII of this size fuels credential stuffing, phishing and identity fraud against regional users and service providers. Defenders in the region should treat it as an early warning and prepare for follow-on batches.