BRIEFLeakhighP58
Database leak of Mexican firm iPESA Pintures
iPESA Pintures (pintando.com.mx)
Detected11 October 2026 · 20:34 UTC
A threat actor is publishing a database allegedly belonging to Mexican paint retailer iPESA Pintures (pintando.com.mx). If genuine, the dump exposes customer and possibly corporate records usable for phishing, fraud and credential stuffing against Mexican users. Mexican organizations and resellers should verify the exposure and warn affected customers.
CategoryLeak
Severityhigh
Priority score58
Detected11 October 2026 · 20:34 UTC
Leak● 30
Filtración de datos del proveedor fintech KipleA post offers the leaked database of Kiple, a fintech/payments provider, for download. The thread dates to late 2025, so it is stale rather than a fresh alert. Still relevant for defenders at the victim to gauge exposed customer data.Leak● 33
Filtración de 17 millones de cuentas de InstagramA forum thread claims a 17-million-record Instagram database is available, with posts as recent as October 2026. Such dumps are usually recycled or fabricated, and Instagram is a global consumer platform rather than a government or critical-infrastructure target. Value is limited unless records are validated against real credentials.Leak● 40
Base de datos de Anka filtrada para descargaA BreachForums thread offers a leaked database named 'Anka' for direct download. The affected organization and record count are not specified, making impact hard to assess. Watch for confirmation of the victim and the data scope.Leak● 42
Combolist de 468.000 credenciales de BrasilA fresh BreachForums post offers a combolist of roughly 468,000 Brazilian email/password credentials labeled HQ. Brazil is in the LATAM scope, and this feeds credential-stuffing against Brazilian services. No specific organization is named, so it is a broad exposure rather than a targeted breach.Leak● 42
Filtración de datos del servicio anti-bot DoubleCounter.ggA breach of DoubleCounter.gg, a Discord anti-alt and verification service, was posted on 11 October 2026. The platform stores user IDs, IP addresses and verification metadata for many communities, so the leak can expose linked accounts and infrastructure details. It is niche and non-regional, but fresh and could feed downstream account and fraud attacks.Leak● 44
Base de datos de 2 millones de suscriptores móviles de Indonesia a la ventaA seller is offering a database of 2 million Indonesian mobile subscribers reportedly derived from SIM-card registration records, including identity and phone data. This is a large telecom dataset that enables SIM-swap, fraud and identity theft at national scale. It sits outside the LATAM region, so it is relevant as a sizeable national telecom leak but not a regional alert.