BRIEFLeaklowP35
Database leak of Mexican marketplace Mercadazo
mercadazo.com.mx
Detected27 September 2026 · 09:17 UTC
A database for the Mexican online marketplace mercadazo.com.mx was posted for download on DarkForums. The thread is dated 2023, so this is a stale leak rather than a fresh incident, and the exact record count is unclear. It still matters for LATAM defenders because exposed user credentials and PII from a Mexican commerce site can resurface in credential-stuffing and fraud campaigns.
CategoryLeak
Severitylow
Priority score35
Detected27 September 2026 · 09:17 UTC
Leak● 58
Venta de 2.700 millones de registros de SSN de EE.UU. con datos personalesA seller is offering a claimed 2.7 billion US SSN records bundling full name, address, date of birth, phone and ID data. Even if aggregated from prior breaches, the scale enables mass identity theft and account-takeover. Defenders in fraud, banking and identity sectors should treat it as a large fresh fullz dataset for sale.Leak● 70
Filtración de datos del sistema de universidades tecnológicas estatales de MéxicoA dump of roughly 845K records tied to Mexico's state technology universities system is circulating on a hacking forum. Such education-sector data typically includes student/staff PII, credentials and enrollment records, useful for phishing and credential-stuffing. It matters because Mexican public education entities are frequent targets with weak segmentation.Leak● 35
Base de datos de Swan Bitcoin publicada en foro de filtracionesA thread on a leak forum shares a database attributed to Swan Bitcoin, a US Bitcoin financial-services firm. If authentic, customer KYC and account data could be exposed, raising risks of fraud and targeting of crypto holders. The post is dated May 2026, so it is not a fresh alert but remains relevant context.Leak● 60
Base de datos filtrada de SplitVPN (NotVPN): 23,4M usuariosA dataset claimed to be from SplitVPN (NotVPN) contains 23.4M users, 58M logs and 13.6M devices. VPN account and connection logs expose user identities, credentials and usage patterns, enabling credential stuffing and targeted attacks. It is a sizable fresh consumer-VPN leak worth monitoring even outside the LATAM government scope.Leak● 65
Filtración de base de datos de Stripe en foro clandestinoA forum thread claims the Stripe.com database was leaked and is being circulated, which if genuine would expose payment-processing data for one of the world's largest fintechs. Stripe underpins payments for countless merchants and platforms, so any real breach is high-impact for downstream customers. Verify authenticity and watch for credential-stuffing and downstream fraud.Leak● 45
Venta de 2.700 millones de registros de SSN de EE.UU.A seller is advertising 2.7 billion US SSN records with full name, address, date of birth, phone and ID. This volume almost certainly repackages the earlier National Public Data breach rather than a new incident, but it still represents massive identity-theft exposure for US residents. Treat it as a recycled yet high-volume PII dataset for fraud monitoring.