BRIEFLeakhighP84
Chile's National Sports Institute database leaked (1.72M records)
Instituto Nacional de Deportes de Chile (IND)
Detected14 October 2026 · 01:53 UTC
A poster is distributing a 1.72M-record database tied to Chile's National Sports Institute (IND, ind.cl), a public body under the Ministry of Sports. The dump likely exposes citizens' personal and contact data, creating phishing, impersonation and credential-stuffing risk. Chilean government defenders should verify the exposure, notify affected users and hunt for any leaked internal credentials.
CategoryLeak
Severityhigh
Priority score84
Detected14 October 2026 · 01:53 UTC
Leak● 30
Filtración masiva de Diia (Ucrania): 20 M ciudadanosA thread re-shares a claimed 2025 mega leak of Ukraine's Diia state digital-identity platform affecting 20M+ citizens. The data involves national identity documents and personal records, making it highly sensitive, but the source is dated 2025 and is being recirculated rather than freshly breached. It is catalogued for context, not as a time-sensitive alert.Leak● 42
Base de datos del FCI Bank filtrada en foroA fresh DarkForums post advertises a leaked FCI Bank database, implying exposure of financial customer records. Banking datasets enable fraud, identity theft and credential attacks against the institution and its clients. The affected region and exact entity are unclear, so it is flagged for verification but still worth surfacing as a named financial leak.Leak● 54
Filtración de datos internos de Uber (uberhub, 20 M)A thread advertises data tied to uberhub.uberinternal.com with a claimed scale of over 20 million records. Internal corporate infrastructure data of this size can expose employee accounts, MDM and internal tooling, aiding lateral movement and follow-on intrusions. It merits attention for access and leak monitoring even though Uber is not a LATAM entity.Leak● 56
Filtración de datos de Air Miles España (travelclub.es)A database belonging to Air Miles España (travelclub.es), a Spanish loyalty and travel programme, is offered in a DarkForums leak thread. Such datasets typically contain personal data and account credentials of many members, enabling fraud, phishing and loyalty-point abuse. It matters for Spanish-speaking victims and for tracking a named corporate leak.Leak● 60
Filtración completa de la operadora Odido (Países Bajos)A post claims a full leak of Odido, a major Dutch telecom operator, a critical-infrastructure sector where data exposure is especially damaging. Telecom breaches expose subscriber data, SIM and account controls, enabling fraud and SIM-swap attacks. Even outside Latin America it is directly relevant to access/leak monitoring and worth surfacing for peer telecom defenders.Leak● 72
Filtración de base de datos de la brasileña PrivaliaA large set of roughly 1.8 million Privalia Brasil credentials (URL and password) is being shared on DarkForums, indicating a substantial retail database leak in Latin America. Privalia is a major fashion e-commerce brand in Brazil, so the exposed logins enable account takeover, fraud and reuse against other services. Regional defenders should force resets and watch for credential-stuffing and phishing leveraging this dataset.