BRIEFLeakhighP47
Database leak of Brunei's SHENA health and safety authority
Safety, Health and Environment National Authority (SHENA), Brunei
Detected19 October 2026 · 14:39 UTC
A database attributed to Brunei's Safety, Health and Environment National Authority (SHENA) has been posted for download on a breach forum. As a national regulatory body, it likely handles internal staff, inspection and compliance records whose exposure raises government-targeting and phishing risk. Though outside the AR-LATAM focus, government database leaks are worth tracking due to possible downstream supply-chain or credential reuse.
CategoryLeak
Severityhigh
Priority score47
Detected19 October 2026 · 14:39 UTC
Leak● 40
Filtración de la base de datos inmobiliaria de MykukunThe breach forum lists a leaked database from Mykukun, a real-estate data and analytics provider. Real-estate professional account data can be leveraged for business email compromise and targeted phishing. Smaller scale but still relevant for monitoring credential reuse.Leak● 48
Filtración de base de datos de clientes de Spytec GPS con 131.000 registrosA customer database of GPS-tracking vendor Spytec containing about 131,000 records is listed on a breach forum. Tracking-service customer data can expose physical-location and contact details, aiding stalking and fraud. It is a moderate-size leak worth monitoring for reused credentials.Leak● 52
Base de datos de Hallmark con 8 millones de registros a la ventaA dataset of roughly 8 million records labelled Hallmark is offered for download on a breach forum, suggesting a large customer or account database leak. At that scale it enables credential stuffing and targeted phishing against the brand and its partners. Defenders should check for reuse of corporate accounts in the dump.Leak● 60
Filtración de la campaña de Philip Morris en Brasil (Cia de Trade)A 215MB archive tied to a Philip Morris campaign run through the Brazilian firm Cia de Trade has been leaked, including PST mail archives, HR pay stubs and roughly 965 staff credentials. The exposure of internal email and HR records enables targeted phishing, business email compromise and credential reuse against the organization and its partners. Brazilian and regional defenders should force credential resets and review mail exposure.Leak● 54
Filtración de 1,5 millones de transacciones de QRIS IndonesiaA BreachForums thread is distributing what it claims is a database of about 1.5 million QRIS transactions, Indonesia's national QR payment standard used by banks and merchants nationwide. Though outside Latin America, it is a direct example of national payment-rail data being traded openly, which is useful context for defenders of similar systems such as Pix or Mercado Pago. Scale and freshness of the dataset are unverified and should be treated as unconfirmed.Leak● 64
Filtración de datos de RRHH de Philip Morris BrasilA forum post advertises a 215MB archive from Cia de Trade Philip Morris in Brazil containing PST mailboxes, HR paystubs and credentials for roughly 965 staff. If genuine, it hands attackers working corporate email, payroll and identity data to pivot deeper into the Philip Morris environment and to run convincing HR-themed phishing. Relevant for Latin American defenders in the tobacco and industrial sector even though the post date is unconfirmed.