BRIEFLeakcriticalP80
Database leak of Dominican health insurer ARS Meta Salud
ARS Meta Salud
Detected20 October 2026 · 23:39 UTC
A full database belonging to ARS Meta Salud, a Dominican Republic health insurer, has just been posted for download on DarkForums. Health insurers hold sensitive patient and policyholder PII (names, IDs, coverage, contact data), making this a high-value leak for fraud and phishing. Defenders in the LATAM health sector should treat this as a fresh, region-relevant exposure and monitor for credential stuffing and social engineering against members.
CategoryLeak
Severitycritical
Priority score80
Detected20 October 2026 · 23:39 UTC
Leak● 18
Filtración de 11 millones de credenciales de PoshmarkA thread advertises an 11 million-record Poshmark email:password combolist. Poshmark suffered a widely reported breach exposing millions of accounts, so this matches an older, resold dataset rather than new access. Low urgency, but it confirms ongoing trafficking of its users' credentials for account takeover.Leak● 25
Base de datos de clientes de Under Armour a la ventaDarkForums lists a customer database for underarmour.com in its 'Databases' section. Under Armour disclosed a 2018 breach of roughly 150M accounts, so this is almost certainly a repackaged or resold copy rather than a fresh intrusion. Only mildly useful as a reminder of credential-stuffing and phishing exposure for its user base.Leak● 50
Base de datos de Jaguar Land Rover filtrada en un foroA BreachForums thread advertises a leaked Jaguar Land Rover database available for download. The automotive manufacturer has suffered significant prior intrusions, so this may be a repost of older data rather than a fresh breach, which lowers urgency. Still, it is a named high-profile enterprise dataset worth verifying for freshness and downstream credential/PII exposure.Leak● 57
Filtración de datos de DoorDash publicada en un foroA thread dated 19 October 2026 offers a DoorDash data set for download on DarkForums. DoorDash is a large food-delivery platform, so any leaked customer, courier or merchant data carries fraud and account-takeover risk. Although it is not a LATAM or government target, a fresh large-org leak is worth tracking for downstream credential and PII abuse.Leak● 42
Filtración de base de datos del cartório brasileño 1cartoriosbc.com.brA threat actor posted a username:password database attributed to 1cartoriosbc.com.br, a Brazilian notary (cartório) web service, in a public leak forum. Notary offices hold identity, property and contract records, so even a site-level credential dump can feed account takeover against staff and downstream fraud. It is fresh and regionally relevant, though scale and record sensitivity are not yet confirmed.Leak● 78
Base de datos de vulnerabilidades de Ecuador publicada en foroA dataset titled as an Ecuadorian vulnerabilities database has been shared on a hacking forum, likely cataloguing vulnerable government systems or exposures. Such a list acts as a targeting map for intrusion into public entities and should be triaged against exposed services. It is fresh and tied to an actor actively dumping Ecuadorian state data.