BRIEFLeaklowP40
Database leak of construction firm Eiffage
Eiffage
Detected16 September 2026 · 03:12 UTC
A database allegedly belonging to French construction giant Eiffage was posted to a leak forum, with the thread dated June 2026 and referencing a February 2026 leak. It concerns a real corporate organization, but it is a European firm outside the AR/LATAM scope and the post is several months old, so it is not a fresh alert. It remains worth tracking for credential reuse and downstream targeting of suppliers.
CategoryLeak
Severitylow
Priority score40
Detected16 September 2026 · 03:12 UTC
Leak● 55
Base de datos del monedero BitboxWallet a la ventaA threat actor (Spain74) posted a database allegedly belonging to BitboxWallet, a cryptocurrency wallet service, on BreachForums on 16 September 2026. If genuine, it could expose user account records, emails and wallet-related data for the platform's customers. Crypto wallet leaks are high priority because stolen PII and credentials enable account takeover and financial theft.Leak● 38
Filtración de base de datos de la tienda brasileña lojadoponto.com.brAn actor posted the database of the Brazilian e-commerce site lojadoponto.com.br on BreachForums for download. The leak exposes customer and order data of a commercial retailer in Brazil. While lower impact than a government target, the resale and fraud potential for regional customers warrants monitoring.Leak● 48
Filtración de base de datos del Detran SP con 13,3 millones de registrosThe database of São Paulo's state traffic department (Detran SP) with 13,391,378 records has been reposted for download, exposing driver personal data. Although the underlying data is from 2020, its redistribution still enables identity fraud, phishing and targeted attacks against citizens and the government body. It is a large government dataset from a critical-infrastructure sector in Brazil.Leak● 50
Filtración y venta de datos de más de 750 grandes empresas turcasA seller is leaking and offering data from over 750 top Turkish companies, indicating a broad aggregation of corporate or customer records posted just hours ago. Stolen corporate data at this scale fuels fraud and is routinely reused for phishing against partners and subsidiaries. Defenders should check exposure if their organization or vendors operate in Turkey.Leak● 55
Información de brecha de datos de la energética estadounidense CenterPoint EnergyA threat actor is circulating details of a data breach at CenterPoint Energy, a major US electric and gas utility, likely exposing customer or operational data. Although outside Latin America, compromises of large energy providers are a strong indicator of critical-infrastructure targeting trends. Energy-sector defenders should review third-party and customer data exposure and watch for follow-on extortion.Leak● 55
Venta de datos de más de 750 empresas turcasA threat actor is advertising a dataset covering 750+ leading Turkish companies, likely including corporate records and contact data. Though outside Latin America, a leak of this scale signals a broad breach affecting many organizations. Defenders and firms with Turkish partners or operations should watch for exposure and credential reuse.