BRIEFLeakcriticalP90
Database leak of the Costa Rica Supreme Electoral Tribunal
Tribunal Supremo de Elecciones de Costa Rica
Detected4 October 2026 · 23:55 UTC
A full database of Costa Rica's Supreme Electoral Tribunal is offered for sale, reportedly around 3.75 million records. This is a national electoral authority, so exposure of citizen and voter data enables identity theft, phishing and electoral fraud. Defenders in the region should treat it as a confirmed government data breach.
CategoryLeak
Severitycritical
Priority score90
Detected4 October 2026 · 23:55 UTC
Leak● 62
Base de datos de Serasa Experian filtrada y ofrecida para descargaSerasa Experian, Brazil's largest credit bureau, is being offered as a full database download on BreachForums. Such dumps typically hold names, CPF, addresses, emails and credit data on hundreds of millions of Latin American consumers, enabling identity theft, loan fraud and phishing. For AR/LATAM banks and fintechs this is high-signal customer PII exposure worth monitoring for credential stuffing and fraud.Leak● 28
Filtración de datos de estudiantes de la Universidad Cadi AyyadA free dump of 270 student records from Morocco's Cadi Ayyad University was published, including national ID (CIN), student numbers (CNE/APOGEE) and photos. The scale is small, but it exposes verified PII that enables identity fraud and targeted phishing of students and staff. It is outside the AR-LATAM scope, so it is mainly of background interest.Leak● 34
Combolist dirigido de 597.299 cuentas de AmazonA large combolist of roughly 597,000 Amazon-targeted credentials is being posted as fresh. Such dumps drive credential stuffing, account takeover and fraud using stored payment methods. Impact is partly mitigated by Amazon controls, but user reuse makes it worth a low-priority alert.Leak● 42
Varias bases de datos filtradas puestas a la ventaA fresh post on a major leak forum advertises a bundle of multiple breached databases for sale. The exact organizations and record counts are not yet detailed, which limits triage, but multi-database bundles often contain real PII with downstream fraud risk. Monitor for the seller releasing samples or victim names.Leak● 46
Credenciales de Binance y Coinbase filtradas en masaA dump of 143,110 'targeted' credential lines for Binance and Coinbase accounts was posted for sale, giving attackers a ready pool for account takeover and crypto theft. Crypto-specific lines succeed more often than generic combos, so customer funds and API keys are at direct risk. Defenders should force resets and watch for credential-stuffing and unusual withdrawal patterns.Leak● 70
Base de datos de Coregistros con 8 millones de líneas a la ventaThe same 8-million-line coregistros.com database is being posted on a second underground forum, indicating active distribution. A large Latin American registrant/user dump like this fuels phishing, credential stuffing and identity fraud. The cross-forum spread suggests it is fresh and being pushed now.