BRIEFLeakhighP65
Database leak of Colombian courier Interrapidísimo (661K)
Interrapidísimo (Colombia)
Detected20 September 2026 · 03:37 UTC
A 661K-record database attributed to Colombian courier Interrapidísimo is being posted for leak/sale. Shipping firms hold names, addresses, phone numbers and tracking IDs that enable parcel scams, phishing and identity fraud against customers. LatAm defenders and the company should confirm scope and warn users about impersonation.
CategoryLeak
Severityhigh
Priority score65
Detected20 September 2026 · 03:37 UTC
Leak● 48
Datos y permisos de base de datos de Shanghai IMPACT Therapeutics a la ventaA BreachForums thread advertises 'Database Permissions and Full-Set Data' belonging to Shanghai IMPACT Therapeutics (HKEX: 07630), a clinical-stage biopharma company. It appears to offer both live database access and a full copy of the dataset, implying a real organizational compromise rather than a combolist. Sensitive research and clinical data could be at risk, though it is outside the AR-LATAM focus and the date/scale are unverified.Leak● 76
Base de datos del Ejército Argentino filtrada por EsqueleSquadThe actor EsqueleSquad published a database allegedly belonging to the Argentine Army (Ejército Argentino) in the leak section of the Spear Leaks forum, presented as a downloadable archive. Although the thread dates from late July 2026 and is therefore a few months old, it exposes military personnel or institutional data and remains a valid exposure for credential stuffing and targeting of defense staff. Any records tied to .mil.ar identities should be treated as already compromised and monitored for reuse.Leak● 86
Base de datos de Diners Club Ecuador comprometida y a la ventaUser 'pheisito' posted today (04 Nov 2026) on BreachForums a thread titled 'DINERS ECUADOR HACKED', indicating a breach of Diners Club Ecuador, a card issuer and regulated financial institution. Cardholder and customer data of a bank-like entity is at stake, enabling payment fraud, account takeover and downstream identity theft. It is fresh and directly relevant to Ecuador's financial sector.Leak● 40
Presunta filtración de un millón de registros de Crypto.com reeditada en foroA Niflheim forum thread re-advertises a '1 Million Database' attributed to crypto exchange Crypto.com. The thread is an older post being bumped with fresh replies rather than a new release, and the underlying data has circulated in prior waves. It is relevant for tracking crypto-sector credential exposure, but it is not a fresh alert and the authenticity of the records is unconfirmed.Leak● 48
Base de datos de 100.000 usuarios de un banco de EE. UU. ofrecida como filtraciónA thread on the Spear Leaks forum advertises a 'FRESH' file containing full information on 100,000 US bank users. The body is behind a login wall, so the institution is unnamed and the sample cannot be validated from the title alone. Financial KYC data at that scale would support account takeover and synthetic-identity fraud, but without the bank's identity or a verifiable sample this is a low-confidence claim.Leak● 42
Base de datos bancaria sin identificar publicada en BreachForumsBreachForums user 'Roos' published a fresh thread on 4 November 2026 titled simply 'DATABASE OF BANK' in the Databases section, without naming the institution in the visible portion. Bank datasets circulating on leak forums typically contain customer identity, account and card data that fuels fraud and account takeover. The target is unconfirmed, so this is a monitor-and-correlate item rather than an actionable victim alert.