BRIEFLeakcriticalP92
Database leak of Venezuela's Corpoelec and BanFanb
Corpoelec / BanFanb (Venezuela)
Detected6 October 2026 · 19:07 UTC
A threat actor claims to have leaked databases belonging to Corpoelec, Venezuela's state-owned electric utility, and BanFanb, the bank of the Bolivarian National Armed Forces. This pairs critical energy infrastructure with a military-linked financial institution in Latin America, a high-value combination for espionage, fraud and follow-on intrusions. Defenders should assume exposed credentials and PII that could enable account takeover or lateral movement against these entities.
CategoryLeak
Severitycritical
Priority score92
Detected6 October 2026 · 19:07 UTC
Leak● 28
Filtración de base de datos de una facultad de la Universidad de MansouraA leaked database belonging to a faculty at Egypt's Mansoura University has been shared in NulledBB's cracking section. The dump likely contains staff and student personal data and credentials that can fuel phishing and account-takeover attempts. It is a named academic institution breach worth tracking even outside LATAM.Leak● 32
Filtración de la base electoral israelí (2020) con 6,5M registrosA 6.5M-record database tied to the Israeli 'Elector' electoral app (2020) is circulating on the Spear leak forum. It exposes personal data of millions of citizens and remains useful for identity theft and targeting. The dataset is years old, so it is a background indicator rather than a fresh incident.Leak● 36
Base de datos de 250 millones de SSN de EE.UU. a la ventaA thread advertising a 250-million-record US Social Security Number dataset is active on xReactor. If genuine, it is one of the largest identity datasets in circulation, enabling fullz, account takeover and fraud at scale. The deep thread history indicates a longstanding, not fresh, offering.Leak● 58
Base de datos de plataforma deportiva de EE.UU. (8,2M filas) a la ventaA seller is offering roughly 8.2 million rows of user data from a US digital sports management platform, likely names, emails and credentials. Although the victim is US-based, the scale makes it valuable for credential-stuffing and phishing. Defenders should watch for reuse of these accounts across other services.Leak● 42
Base de datos de teléfonos de clientes de KuCoin a la ventaA threat actor is selling a database of KuCoin customer phone numbers. Phone data alone enables targeted SIM-swap, smishing and account-takeover attempts against crypto users. Exchange customers remain high-value targets for financial fraud, so this warrants awareness.Leak● 52
Brecha de datos de Pathao expone datos de 19 millones de usuariosA threat actor claims a catastrophic breach of Pathao, the Bangladeshi ride-hailing and fintech super-app, exposing personal data of about 19 million users. The dataset contains identity and contact data that enable fraud and account takeover. This is a large, regionally significant leak worth monitoring.