BRIEFLeakhighP68
Peru SBS banking regulator database leak with 13M clients
SBS Perú (Superintendencia de Banca, Seguros y AFP)
Detected24 October 2026 · 12:13 UTC
A 13-million-record data set tied to Peru's banking, insurance and pension superintendency (SBS) is being circulated as monthly credential combos covering 2025-2026. Although presented in combolist form rather than a full structured dump, it targets a financial-sector regulator and can fuel credential stuffing against Peruvian banking and insurance portals. Peruvian defenders should force resets for affected accounts and monitor for reuse across sector services.
CategoryLeak
Severityhigh
Priority score68
Detected24 October 2026 · 12:13 UTC
Leak● 52
Filtración de 1,2 millones de líneas de La France InsoumiseA database described as containing 1.2 million lines from French political party La France Insoumise is being distributed. Member and contact data of a political party fuels targeted phishing against activists and officials. Large, recent political leaks warrant monitoring for downstream credential abuse and influence operations.Leak● 62
Filtración de 3 millones de registros del grupo francés MaevaA threat actor is leaking or selling a database attributed to Maeva Group containing roughly 3 million records. If confirmed, it exposes customer and booking data of a major European vacation-rental operator, enabling phishing and account-takeover campaigns. Defenders should verify scope and monitor for credential reuse.Leak● 45
Venta de base de datos de la aseguradora American Income LifeA seller is listing data tied to American Income Life Insurance Company (ailife.com) in a marketplace leads section, likely a scraped or breached customer/policyholder dataset. The scale and freshness are unconfirmed from the snippet, and the target is outside the LATAM region, but a named insurer dataset can fuel phishing and identity fraud against policyholders and agents. Worth tracking for confirmation rather than treating as an urgent alert.Leak● 85
Filtración de base de datos de la SBS Perú con 13 millones de clientesA threat actor is advertising a massive database attributed to Peru's banking and insurance superintendency (SBS), claiming roughly 13 million client records with monthly combo updates through 2025-2026. If genuine, this exposes identities and credentials tied to the country's regulated financial sector, enabling credential stuffing and fraud against banks, insurers and AFP pension funds. Defenders in Peruvian finance should treat this as a high-priority monitoring and reset signal.Leak● 62
Base de datos de infraestructura corporativa de SAP Ecuador expuestaA BreachForums listing advertises a database described as SAP Ecuador corporate infrastructure exposed, indicating a leak of internal corporate/enterprise data from an Ecuadorian SAP operation. The scale and exact contents are unclear from the item, but corporate infrastructure data can reveal systems, credentials or business records that fuel further intrusion. It is regionally relevant for LATAM defenders despite the unknown date and detail level.Leak● 52
Base de datos de clientes canadienses de Coinbase a la ventaA seller advertises a database of Canadian Coinbase crypto customer data for purchase over Telegram. If genuine, it exposes KYC-adjacent personal and financial details of exchange users, a high-value set for fraud, phishing and crypto-targeted extortion. Exchange users and Canadian financial-sector defenders should watch for follow-on phishing and SIM-swap campaigns.