BRIEFLeaklowP44
Database leak of Noon (Egypt)
Noon (Egipto)
Detected19 September 2026 · 16:23 UTC
A database belonging to Noon, a major Middle East e-commerce firm in Egypt, has been posted as leaked. Customer and order records from an e-commerce platform enable phishing, fraud and account takeover. Although outside LATAM, it is a fresh named-organization leak worth tracking.
CategoryLeak
Severitylow
Priority score44
Detected19 September 2026 · 16:23 UTC
Leak● 45
Base de datos de 80.000 clientes de juandediego.es a la ventaA seller on the pwnfrm onion forum offers an 80,000-record database from the Spanish company juandediego.es, including CIF/NIF tax identifiers and IBAN bank details. Business and financial identifiers of this kind support invoice fraud, vishing and business email compromise against Spanish customers and suppliers. The dump should be confirmed and affected clients warned.Leak● 55
Venta de base de datos SQL de 7 GB de etestify.com (España)A seller on the pwnfrm onion forum is offering a 7GB SQL dump of the Spanish platform etestify.com covering roughly 84,000 members. A full database export of that size usually carries emails, hashed passwords and profile data, enabling targeted phishing and account takeover against Spanish users. Organisations relying on etestify services should assess their exposure.Leak● 60
Base de datos de 2 millones de líneas de helity.es a la ventaA seller on the pwnfrm onion forum advertises a 2-million-line database tied to the Spanish site helity.es, by far the largest single-victim dump listed on that board. The volume implies customer records and possibly credentials or transaction data, exposing Spanish users to credential stuffing and identity fraud. Defenders should treat any helity.es account as compromised until proven otherwise.Leak● 62
Base de datos del servicio de bomberos francés SDIS (7K registros) publicada por AplaGroupA threat actor using the handle AplaGroup is advertising a database allegedly belonging to a French fire and rescue service (SDIS), roughly 7,000 records, on the pwnfrm onion forum. Although small in volume, the victim is an emergency-services organization, so exposed data likely includes personnel, contact and operational details useful for spear-phishing or physical targeting. The post date is not visible in the recovered thread, so recency should be confirmed before escalating.Leak● 48
Datos y permisos de base de datos de Shanghai IMPACT Therapeutics a la ventaA BreachForums thread advertises 'Database Permissions and Full-Set Data' belonging to Shanghai IMPACT Therapeutics (HKEX: 07630), a clinical-stage biopharma company. It appears to offer both live database access and a full copy of the dataset, implying a real organizational compromise rather than a combolist. Sensitive research and clinical data could be at risk, though it is outside the AR-LATAM focus and the date/scale are unverified.Leak● 76
Base de datos del Ejército Argentino filtrada por EsqueleSquadThe actor EsqueleSquad published a database allegedly belonging to the Argentine Army (Ejército Argentino) in the leak section of the Spear Leaks forum, presented as a downloadable archive. Although the thread dates from late July 2026 and is therefore a few months old, it exposes military personnel or institutional data and remains a valid exposure for credential stuffing and targeting of defense staff. Any records tied to .mil.ar identities should be treated as already compromised and monitored for reuse.