BRIEFLeakhighP68
Data leak of 12,000 patients from clinic INTELMED
INTELMED (clínica, Latinoamérica)
Detected15 November 2026 · 00:13 UTC
Reposts collapsed2
Actor Synq1xxss posted a database attributed to the Latin American clinic INTELMED with roughly 12,000 patient records on DarkForums on 15 November 2026. Health records of this kind fuel medical fraud, identity theft and extortion of patients. Regional clinics and insurers should check whether their data is in the dump and review access controls on patient systems.
CategoryLeak
Severityhigh
Priority score68
Detected15 November 2026 · 00:13 UTC
LeakPriority 62
Filtración de base de datos de la Universidad Celso Lisboa (RJ)Actor Duk3nk published on DarkForums on 14 November 2026 a database belonging to Celso Lisboa University in Rio de Janeiro, Brazil. University datasets usually hold student and applicant personal data, contact details and possibly academic and financial records, which fuel phishing and identity theft. The leak is recent and the data may already be circulating among buyers.LeakPriority 65
Filtración de datos de la plataforma educativa Educastur (España)User karsovx posted on DarkForums on 14 November 2026 a database apparently taken from Educastur, the public education platform of the Principality of Asturias in Spain. The data would cover students, teachers and staff accounts tied to a public service, enabling credential stuffing and convincing phishing. Public-sector education records carry data-protection obligations and should be assessed now.LeakPriority 40
Base de datos de 500.000 usuarios de Rainbet a la ventaA BreachForums seller is advertising a mail list of roughly 500,000 Rainbet users, an online crypto casino, as a standalone database for sale. The listing gives no date or sample, so the database may be scraped or partly stale, but it targets gambling accounts that are prime material for credential stuffing and account takeover. Betting users are also frequent targets of phishing and payment fraud.LeakPriority 45
Filtración de datos de empresa de verificación de antecedentes de PakistánA DarkForums thread offers leaked data belonging to a Pakistani background-verification company, a sector that holds identity and employment records on many individuals. The thread has already reached five pages and carries no visible date, suggesting an older or long-running release rather than a new incident. It still matters for regional exposure checks on screening and KYC providers, but is not a fresh alert.LeakPriority 30
Lista de 500.000 correos de usuarios de Rainbet a la ventaA BreachForums marketplace seller is offering a 500,000-entry mail list attributed to users of Rainbet, an online casino and betting platform. The thread shows no clear date and the format suggests a harvested or aggregated email list rather than a full database dump, so impact is limited to spam, credential stuffing and phishing against gamblers. It matters mainly for Rainbet's fraud and trust-and-safety teams rather than for public-sector defenders.LeakPriority 62
Filtración de la base de datos del Ministerio de Exteriores de BulgariaA BreachForums user published a downloadable database from culture-mfa.bg, a Bulgarian Ministry of Foreign Affairs domain, making government data freely available. The post appears to date from around August 2026, so it is a few months old rather than a fresh alert. Any exposed records of a foreign-ministry system raise counter-intelligence and diplomatic-contact concerns, but the post is no longer time-critical.