BRIEFLeaklowP46
Database leak of South Korean e-commerce site metree.co.kr
metree.co.kr
Detected6 October 2026 · 05:07 UTC
A threat actor is offering a 2026 database allegedly belonging to South Korean e-commerce site metree.co.kr, posted on DarkForums within the last minutes. It sits outside Latin America, but it is a fresh breach of a named commercial entity likely containing customer PII and order data. Analysts in the region should still track it for credential-reuse risk and the actor's broader targeting pattern.
CategoryLeak
Severitylow
Priority score46
Detected6 October 2026 · 05:07 UTC
Leak● 40
Filtración masiva de datos chinos con 50.000 millones de registrosA forum user claims to have published a collection of leaked Chinese data exceeding 50 billion records. If genuine, this scale of aggregated personal and corporate data poses risks for credential stuffing, fraud, and identity theft on a global scale. Treat the claim with caution given its size, but monitor for downstream credential abuse.Leak● 42
Base de datos criminal de EE. UU. con 70 millones de registrosA forum posting offers a US criminal-records database containing roughly 70 million records, dated July 2026. Such datasets combine sensitive PII and legal records that can fuel identity theft, doxxing, and social engineering against individuals. While not a fresh alert, its size makes it worth tracking for downstream abuse.Leak● 85
Filtración de la base de datos del INTT de VenezuelaA threat actor posted a database belonging to Venezuela's INTT (Instituto Nacional de Transporte Terrestre), the national land-transport authority, on a dark web forum. Vehicle-registration and driver records typically hold citizen PII and could enable identity fraud, targeted phishing, and account takeover against government services. As this targets Venezuelan government infrastructure, defenders should validate the breach scope and monitor for credential abuse.Leak● 82
Filtración de datos de 51.000 estudiantes del CONAFE de MéxicoA threat actor posted a database claiming to contain the personal information of ~51,000 students tied to CONAFE, Mexico's federal education-support agency, on the DarkForums leak section and it appears freshly published. Exposure of minors' education records risks identity theft, extortion and social-engineering of families and staff. For defenders, this is a Latin American government-education data breach requiring verification and victim notification.Leak● 45
Filtrada base de datos con PII de mexicanos de CosmotiendaA forum freebie advertises a 'Mexican PII Database - 2026' attributed to Cosmotienda, containing personal data of Mexican individuals. This is one of the very few regionally relevant items in the batch and could fuel identity theft, KYC fraud and targeted phishing against Mexican users. It matters for LATAM defenders monitoring exposure of local customer data, though the post is roughly six weeks old, so it is not a fresh breaking alert.Leak● 45
Filtracion de la base de datos de 1,49 millones de clientes de Binance.USA database of 1.49 million Binance.US (Authy) records with user_id and phone numbers was posted on a leak forum in February 2026. Binance.US is a regulated US crypto exchange, so the data is valuable for phishing and account takeover. It is not fresh, but the scale makes it a useful credential and exposure reference.