BRIEFGov / MilitarycriticalP88
Data leak of Guatemala's SAT tax authority
SAT Guatemala
Detected28 September 2026 · 17:48 UTC
A forum user has posted a database purportedly exfiltrated from Guatemala's Superintendencia de Administración Tributaria (SAT), the national tax authority. Tax-agency leaks expose taxpayer identities, financial records and possibly credentials, enabling fraud and follow-on intrusions. This is a fresh Latin American government leak that needs immediate validation and notification.
CategoryGov / Military
Severitycritical
Priority score88
Detected28 September 2026 · 17:48 UTC
Gov / Military● 91
Filtración de datos del SAT de Guatemala (autoridad tributaria)A threat actor on the Spear forum has published a database allegedly belonging to SAT, Guatemala's national tax and customs authority. If authentic, it exposes taxpayer and citizen records of a government agency, enabling fraud, identity theft and targeted follow-on intrusions. Guatemalan public-sector defenders should treat this as a live incident and begin verification and containment now.Gov / Military● 85
Filtración de base de datos del Gobierno de PanamáA DarkForums user posted minutes ago a database allegedly tied to the Government of Panama, offered as part of a public leak. The content is undetermined but any government dataset from Panama carries risk of exposing citizen and administrative records. Because it is freshly posted, defenders should treat it as time-sensitive and validate scope.Gov / Military● 52
Puesta en venta de datos del ministerio y la presidencia de IndonesiaActors are offering 'gathered' data attributed to an Indonesian ministry and the president, likely aggregated from prior breaches. Government-held records can include officials' PII usable for influence operations, impersonation and fraud. Even aggregated data raises espionage concerns for regional partners, though the post's age and authenticity are unconfirmed.Gov / Military● 72
Base de datos del personal militar de EE. UU. a la ventaA threat actor is offering a database labeled 'U.S. Military Personnel' on a darkweb forum, posted within minutes of collection. If authentic, it exposes service members' personal data usable for identity theft, targeted phishing and doxxing. Defenders should verify the scope and watch for credential-stuffing against related government accounts.Gov / Military● 58
Filtración de documentos técnicos internos del gobierno ruso (2026)A forum user is freely distributing what are described as internal Russian government engineering/technical documents dated 2026. If authentic, this exposes sensitive state infrastructure planning and design details useful to adversaries and espionage. CTI teams tracking state-sector leaks should verify authenticity and monitor for reuse or resale.Gov / Military● 66
Filtración de datos del personal del Ministerio de Defensa de IsraelA fresh leak exposes data on Israel Ministry of Defense SIBAT staff and SIBAT users, the body handling defense export controls. Named personnel and user records enable targeted phishing and social engineering against defense-sector accounts. It matters as a government/military data compromise even though it is outside the Latin America region.