BRIEFLeakcriticalP88
Database leak of Argentina's Hospital msalud
Hospital msalud (Argentina)
Detected19 September 2026 · 06:12 UTC
A threat actor posted a database belonging to the Argentine hospital msalud on DarkForums, indicating exfiltration of patient and operational data. Healthcare is critical infrastructure and holds highly sensitive personal and medical records, so exposure enables fraud, extortion and follow-on intrusion. The post appears only minutes old, so Argentine health-sector defenders should treat this as a live incident.
CategoryLeak
Severitycritical
Priority score88
Detected19 September 2026 · 06:12 UTC
Leak● 52
Base de datos de un millón de usuarios de Crypto.com difundida gratisAn actor is offering a claimed one-million-record Crypto.com user database for free through the spear.cx forum. If authentic, it fuels credential stuffing, account takeover and phishing against cryptocurrency holders, a high-value fraud target. Authenticity and publication date are unverified, so it should be handled as a lead requiring validation.Leak● 66
Venta de dump completo de documentos de la Fiscalía General de UcraniaA seller on BreachForums is offering a full dump of private documents from the Ukrainian Prosecutor General's Office covering 2020-2026, advertised as an exclusive sale in the Leaks Marketplace section. If authentic, this is a large-scale exposure of internal government correspondence, case files and employee data of a national prosecution authority, valuable for espionage, targeting and influence operations. Defenders in government and law-enforcement sectors should treat it as a real breach until disproven.Leak● 45
Base de datos de 1 millón de usuarios de Crypto.com a la ventaA Niflheim World BHF thread advertises a claimed one-million-record Crypto.com customer database, a major global cryptocurrency exchange. The thread appears to be an older, bumped listing (low thread ID relative to current activity) with no clear recent date, so freshness is uncertain. Exposure of exchange KYC/customer data carries fraud and account-takeover risk, but this is neither LATAM government nor clearly a fresh breach.Leak● 48
Base de datos de un millón de usuarios de Crypto.com a la ventaA SpyHackerz post by 'databoss' (dated January 2026) advertises a database of roughly one million Crypto.com users. The data is several months old, so it is not a fresh alert, but it remains valuable for credential stuffing and phishing against crypto account holders. Teams handling crypto-related identity risk should treat it as a stale but real exposure.Leak● 74
Base de datos de representantes de SINACOL CENCOLAB MéxicoA DarkForums user (homercracker) posted a database of SINACOL/CENCOLAB representatives from Mexico in early November 2026. The dump likely contains names, contact and organizational details of representatives, valuable for targeted phishing, impersonation and social engineering against Mexican labor or health institutions. Affiliated organizations should assess the exposure of these individuals.Leak● 80
Filtración de 2 TB de datos del Gobierno de España por MortemTeamThe group MortemTeam is advertising a 2 TB collection of records attributed to the Government of Spain (Gobierno de España) on BreachForums, bundled with its own data bot. If authentic, it could expose citizen records, internal documents and ministry data, enabling targeted phishing and fraud against public-sector staff and citizens. Spanish public administration should verify exposure and monitor for data reuse.