BRIEFLeakhighP62
Database leak of Pakistani telecom PTML (Ufone)
Pakistan Telecommunications Mobile Limited (PTML/Ufone)
Detected20 October 2026 · 19:39 UTC
A fresh thread published yesterday claims to leak a database from Pakistan Telecommunications Mobile Limited (Ufone), a national mobile carrier. Telecom subscriber and employee records of this scale enable SIM-swap, phishing and account-takeover campaigns affecting millions of users. Although outside Latin America, it is a current large-scale leak worth tracking for downstream credential reuse.
CategoryLeak
Severityhigh
Priority score62
Detected20 October 2026 · 19:39 UTC
Leak● 40
Circulan 11 millones de credenciales de PoshmarkA bulk mail:pass list attributed to Poshmark with roughly 11 million email and password pairs is being re-shared across forums, without a clear original breach date. Large e-commerce credential sets like this fuel account takeover, resale fraud and password-spraying against unrelated services where users reused passwords. Treat it as recycled data for credential-hygiene monitoring rather than a fresh incident.Leak● 82
Presunta filtración de 874 GB de datos de FiservA forum user posted a claim of an 874 GB dump allegedly taken from Fiserv, the payments and core-banking processor behind First Data, Clover and hundreds of bank integrations. The volume suggests full database or file-share exfiltration rather than a small combolist. If genuine, downstream fraud, card and account data exposure could hit banks across the US and LatAm correspondents, so the claim should be validated before it spreads.Leak● 30
Base de datos masiva brasileña de Serasa a la ventaA large Brazilian database attributed to Serasa, Experian's credit bureau, is circulating for sale or leak. Serasa holds credit and consumer financial data, so any genuine breach would be high-impact for fraud and identity theft. However the thread appears old/second-hand, so treat it as likely stale rather than a fresh breach; verify before alerting.Leak● 28
Base de datos de la Embajada de Albania en Moscú filtradaA leak thread from May 2023 claims to expose a database belonging to the Albanian Embassy in Moscow, a diplomatic target. The material is over three years old and concerns a single mission outside Latin America, so it is not a fresh alert. It is noted only as background on sustained targeting of diplomatic entities, which defenders of government networks may find contextual.Leak● 33
Base de datos de delegados de la ONU filtradaA forum post from December 2024 shares what it claims is a United Nations delegates database, a potentially sensitive diplomatic dataset. The post is nearly two years old, so it is not a fresh alert, but such data can still support targeted phishing against officials and diplomatic staff. Any LatAm delegations represented in it warrant awareness rather than immediate action.Leak● 55
Venta de 16 millones de registros de la Punjab Land Records Authority (Pakistán)A seller is offering a 16 million record database attributed to the Punjab Land Records Authority, a Pakistani provincial government body, behind a login wall. Government land and property records tie directly to citizens' identities and ownership, making this a high-sensitivity sale even though it is outside Latin America. Buyers actively seeking government datasets should be treated as a broader leak-market signal for defenders.