BRIEFGov / MilitarycriticalP92
Database leak from Argentine government domain sde.gob.ar
sde.gob.ar (Gobierno de Argentina)
Detected16 October 2026 · 07:56 UTC
The actor 'Returnero' published a database from the Argentine government domain sde.gob.ar on a criminal forum just minutes ago. Exposure of a .gob.ar entity can enable targeted phishing, impersonation and further intrusion against state systems. Given its government origin, it warrants immediate verification and notification to Argentine authorities.
CategoryGov / Military
Severitycritical
Priority score92
Detected16 October 2026 · 07:56 UTC
Gov / Military● 90
Base de datos sde.gob.ar con 800.000 registros publicadaA second thread by 'Returnero' advertises roughly 800,000 records from the Argentine government domain sde.gob.ar. The volume and government nature of the data raise the risk of mass identity misuse, credential abuse and social engineering against public entities. This should be treated as a fresh, high-impact leak requiring urgent analysis.Gov / Military● 71
Credenciales de acceso a la Armada de Malasia a la ventaA seller is offering 277 access credentials tied to Royal Malaysian Navy accounts, posted within the last day. Compromise of military identity/account credentials enables phishing, lateral movement and access to defense systems. Even outside LATAM, a named navy credential dump is high-value and time-sensitive for defenders watching state targets.Gov / Military● 50
Filtración de documentos técnicos internos del gobierno ruso (2026)A DarkForums actor is leaking documents described as Russian government internal engineering and technical material dated 2026. While outside the AR-LATAM scope, it signals ongoing theft of state technical documentation and could be relevant for geopolitical CTI. Analysts should monitor for related infrastructure or reused tradecraft reaching regional targets.Gov / Military● 74
Base de datos de 1 TB del Ministerio de Defensa de Corea a la ventaA seller is offering a 1 TB database allegedly belonging to South Korea's Ministry of Defense (국군방첩사령부). If authentic, this is a major government/military leak of sensitive defense material. Even outside LATAM it signals state-sector exfiltration and sets a benchmark for similar campaigns.Gov / Military● 90
Filtración de base de datos del Gobierno de Veracruz (300k registros)A database attributed to the Mexican state government portal veracruz.gob.mx, roughly 300,000 records, is being offered in an underground forum. Government records typically contain citizen PII, staff credentials and internal data, enabling phishing and account takeover against public agencies. The post is fresh, so affected entities should verify exposure and rotate credentials immediately.Gov / Military● 58
Filtración de documentos hackeados del primer ministro israelí Netanyahu y su esposaA BreachForums actor is circulating documents allegedly stolen from Israeli Prime Minister Benjamin Netanyahu and his wife. Leaks of a head of state's personal and official material carry intelligence, diplomatic and disinformation value and are often amplified for propaganda. CTI teams should authenticate the files, assess exposure of any sensitive content, and monitor how they are repackaged and reused.