BRIEFLeakcriticalP85
Database leak of Pernambuco state hits 9 million residents
Gobierno del Estado de Pernambuco (Brasil)
Detected17 September 2026 · 05:12 UTC
A database covering roughly 9 million residents of the Brazilian state of Pernambuco is being offered on BreachForums, likely including full names, CPF/ID numbers, addresses and contact data from state registries. This is a government breach in Latin America, so the data can fuel identity fraud, social engineering and targeting of public services. Defenders in the region should assume the records are exposed and prepare for credential-stuffing and phishing against citizens.
CategoryLeak
Severitycritical
Priority score85
Detected17 September 2026 · 05:12 UTC
Leak● 40
Filtración de base de datos de la empresa CPRIMEA leaked database belonging to CPrime (cprime.com), a US IT and consulting services company, is being shared on a forum. Any exposure of corporate or client records of a services provider can enable business email compromise and downstream customer targeting. Volume, contents and date are unclear from the post.Leak● 55
Base de datos de 200 millones de cuentas de Telegram filtradaA database of 200M+ Telegram records mapping usernames to phone numbers is being circulated on a leak forum. The scale makes it valuable for SIM-swap, phishing and account-takeover campaigns and for correlating identities across platforms. It is consumer data rather than a specific organization, but the volume is notable and warrants monitoring.Leak● 42
Venta de dataset de 536K usuarios saudíes de TalabatA seller offers a 536K-record dataset allegedly from Talabat, the Saudi Arabian food-delivery platform, dated 13 Sep. Customer PII of a large regional service can drive phishing and account takeover. It is outside the AR-LATAM focus and mid-sized, so lower priority.Leak● 45
Filtración de datos personales nacionales de Australia (438K)A post offers an Australia national personal data leak of 438,522 records including first and last names, dates of birth and phone numbers. This is enough for identity theft and convincing phishing against Australian residents. It falls outside the AR-LATAM remit but is a genuine, sizable PII exposure.Leak● 48
Base de datos de seguro de autos de EE.UU. con 683K registrosA 683,387-record US automobile insurance database is posted for download, likely containing policyholder names, addresses and vehicle details. Such records enable insurance fraud, targeted phishing and identity theft against policyholders. The US focus and moderate size place it below LATAM-critical priority despite being freshly posted.Leak● 52
Filtración de base de datos DIPAM del municipio de São VicenteThe full DIPAM database of the São Vicente municipal government (saovicente.sp.gov.br, São Paulo state) was posted on BreachForums. It exposes citizen records tied to a Brazilian .gov.br service, which can drive identity fraud and phishing. However, the data is dated 8 January 2026, so it is a stale leak rather than a fresh alert.