BRIEFLeakcriticalP85
Database leak of the Colima State Congress
H. Congreso del Estado de Colima
Detected2 November 2026 · 15:24 UTC
BreachForums user 'skyling' posted a database allegedly belonging to the Colima State Congress in Mexico, making internal legislative records available. Government bodies hold sensitive personal data of officials, staff and citizens that can enable fraud and targeting. Mexican state institutions should treat this as a confirmed exposure and assess which datasets were leaked.
CategoryLeak
Severitycritical
Priority score85
Detected2 November 2026 · 15:24 UTC
Leak● 50
Filtración de la base de datos de WorkL.comA BreachForums thread claims a database leak from WorkL.com, a digital workplace intelligence platform used by enterprises for employee surveys and analytics. Such dumps usually carry corporate emails, names, roles and survey responses that feed spear-phishing and business email compromise. Client companies should treat their employee addresses as exposed.Leak● 58
Filtración de datos de 23,4 millones de usuarios de NotVPN/SplitVPNAn xReactor thread advertises a SplitVPN/NotVPN dataset with 23.4 million user accounts, 58 million connection logs and 13.6 million devices. The logs can tie accounts to real IP addresses and usage times, aiding account takeover and de-anonymisation. Organizations should assume employee VPN credentials may be circulating.Leak● 92
Filtración de la base de datos del Órgano Judicial de BoliviaThreat actor konata_izumi_shell posted a claimed dump of Bolivia's Órgano Judicial on BreachForums, RaidForums and DarkForums on 2 Nov 2026. Judicial records typically expose judges, court staff and citizens, enabling identity fraud and targeted phishing against officials. A confirmed judiciary breach would seriously undermine institutional trust in Bolivia.Leak● 55
Base de datos de 96,5 millones de usuarios de 1win a la ventaA DarkForums post advertises a November 2026 dump claiming 96.5 million 1win user records, a large gaming/betting platform. A dataset this size typically includes emails, hashed or plaintext passwords and account details valuable for credential stuffing. 1win is popular across Latin America, so exposed users there face account-takeover risk.Leak● 58
Filtración de 65 GB de datos de la empresa mexicana SertesA 65 GB database tied to the Mexican domain sertes.com.mx was advertised as leaked on DarkForums, exposing a large volume of a local company's records. Such dumps typically include customer and operational data useful for fraud and business email compromise. The exact date and contents are unknown, so verify scope before alerting.Leak● 65
Base de datos de la Corte Superior de Justicia de Lima NorteA 1.9 GB database attributed to Peru's Superior Court of Justice of Lima Norte was posted on DarkForums, suggesting judicial records and case-related personal data may be exposed. Judiciary systems contain sensitive citizen and legal information that is high value for fraud and extortion. Post lacks a clear recent date, so treat as a serious but possibly older exposure needing verification.