BRIEFGov / MilitaryhighP82
Database leak of the Municipality of Colón, Buenos Aires
Municipio de Colón, Buenos Aires
Detected8 October 2026 · 02:07 UTC
A threat actor posted a database attributed to the Municipality of Colón (Buenos Aires province) on BreachForums, exposing citizen/taxpayer records of an Argentine government body. Municipal data enables targeted phishing, identity fraud and lateral movement toward provincial services. Defenders should confirm scope, notify affected residents and reset exposed credentials.
CategoryGov / Military
Severityhigh
Priority score82
Detected8 October 2026 · 02:07 UTC
Gov / Military● 80
Filtración de datos del gobierno estatal de BrasilA Brazilian state government database has been posted for leak on BreachForums by actors Uzesncky and Walker using the #bellator tag. The dump targets public administration data, exposing citizen records and internal government information. Such leaks enable follow-on phishing, credential abuse and attacks on public services across the region.Gov / Military● 90
Filtración de la base de datos del gobierno de San Luis PotosíAn actor posted a database tied to sanluispotosi.gob.mx, the official portal of the Mexican state of San Luis Potosí, and the thread is only minutes old. Government portals typically aggregate citizen records, contracts and staff contacts, so a dump can expose PII and enable phishing or lateral access against public administration. Mexican state defenders should treat this as a fresh incident and confirm scope and access.
Gov / Military● 92
Base de datos del Gobierno de Tucumán filtrada: 90K registrosA 90,000-record database attributed to the Tucumán provincial government (tucuman.gob.ar) was posted for download on a cybercrime forum, with the thread appearing only minutes before collection. Leaked citizen and public-sector records enable identity theft, targeted phishing and credential stuffing against provincial services. Argentine public bodies should confirm the exposure, rotate credentials and watch for downstream fraud.Gov / Military● 56
Fuga de datos SCADA de una planta de agua en IndonesiaA collection of SCADA data from a water treatment plant (WTP) in Indonesia is posted on BreachForums. OT/SCADA exposure in critical infrastructure can reveal network layouts, credentials and control endpoints. Water utilities are high-impact targets, and this material can seed disruptive or destructive attacks.Gov / Military● 85
Base de datos del Gobierno de Jalisco (jalisco.gob.mx) a la ventaAn actor just posted a purported database of the official Jalisco state government domain (Mexico) on DarkForums. Compromise of a state government portal can expose citizen records and internal credentials and act as a pivot into other public systems. High priority for Latin American critical-infrastructure defenders to verify and contain.Gov / Military● 58
Cancillería del Gobierno de Ecuador a la venta en BreachForumsA BreachForums marketplace listing names the Chancellery of the Government of Ecuador, indicating a possible leak or sale of data/access tied to a Latin American state body. If genuine, exposed records or credentials could enable intrusion into official channels and impersonation of government officials. Defenders should verify the claim and hunt for credential reuse against Ecuadorian government systems.