BRIEFLeaklowP48
Morocco Ministry of Investments (MICEPP) database for sale
MICEPP - Ministry of Investments Morocco
Detected2 October 2026 · 18:56 UTC
Reposts collapsed2
A sample of documents plus a database dump from MICEPP, Morocco's Ministry of Investments, is being offered on DarkForums. Government databases expose citizen and institutional data that fuel identity fraud and follow-on attacks on state bodies. It is a substantive state-sector leak, though outside Latin America.
CategoryLeak
Severitylow
Priority score48
Detected2 October 2026 · 18:56 UTC
Leak● 42
Filtración de datos del servicio anti-bot DoubleCounter.ggA breach of DoubleCounter.gg, a Discord anti-alt and verification service, was posted on 11 October 2026. The platform stores user IDs, IP addresses and verification metadata for many communities, so the leak can expose linked accounts and infrastructure details. It is niche and non-regional, but fresh and could feed downstream account and fraud attacks.Leak● 44
Base de datos de 2 millones de suscriptores móviles de Indonesia a la ventaA seller is offering a database of 2 million Indonesian mobile subscribers reportedly derived from SIM-card registration records, including identity and phone data. This is a large telecom dataset that enables SIM-swap, fraud and identity theft at national scale. It sits outside the LATAM region, so it is relevant as a sizeable national telecom leak but not a regional alert.Leak● 58
Base de datos de 40 millones de clientes de Payback Alemania a la ventaActor 'Koshyrman' is selling a 40-million-record database belonging to Payback, a major German loyalty and payments program. Such a leak exposes extensive customer PII (names, addresses, emails, phone numbers) and enables mass phishing, credential stuffing and account takeover. It is outside Latin America, but its scale and recency make it a credible large-breach sale worth tracking.Leak● 50
Datos de clientes de Binance Australia a la ventaA RaidForums seller is offering a dump of Binance Australia customer data for sale. Compromised exchange records expose account holders to targeted phishing, credential stuffing and SIM-swap fraud. Security teams at the exchange and its customers should watch for follow-on account-takeover and social-engineering campaigns.Leak● 55
Base de datos de 109.392 usuarios de Coinbase a la ventaA RaidForums seller is offering a database of 109,392 Coinbase accounts with balances attached, indicating compromised credentials of real users. Such records fuel targeted phishing, credential stuffing and account takeover against crypto holders, who face direct financial loss. Defenders should treat it as a credential-leak signal and push MFA and password resets to affected accounts.Leak● 25
Filtración de datos de la alimentaria brasileña Integra FoodsA database from the Brazilian food company Integra Foods (integrafoods.ind.br) was posted on a leaks forum. The thread is dated July 2023, so this is stale material rather than a fresh incident. It is included only for correlation, not as a new alert.