BRIEFLeakhighP60
KYC customer database leak of TuLotero.es
TuLotero.es
Detected16 September 2026 · 11:12 UTC
A seller is offering the KYC database of the Spanish lottery platform TuLotero.es, which typically contains full identity data: names, ID documents, addresses and verification records. Because KYC files allow direct identity theft and account takeover, exposure affects real Spanish-speaking users and can fuel downstream fraud. Posted just hours ago, it is still time-sensitive for defenders monitoring Iberian/Hispanic targets.
CategoryLeak
Severityhigh
Priority score60
Detected16 September 2026 · 11:12 UTC
Leak● 40
Filtración de bases de datos del gobierno de SomalilandiaA freshly posted thread claims a leak of Somaliland government databases, potentially exposing citizen and administrative records. Government data leaks of this type can enable identity fraud and further intrusion into public systems. It is low priority for AR-LATAM defenders but worth noting for regional government-target monitoring.Leak● 56
Base de datos de banco comercial de Tailandia a la ventaA seller is advertising a database allegedly belonging to a commercial bank in Thailand, likely containing customer PII and financial records. Banking data of this kind enables account fraud, phishing and further intrusion into the institution. Posted within the last three weeks, it remains relevant for financial-sector defenders.Leak● 26
Filtración de base de datos del Politécnico Ferroviario de IndonesiaA database of Indonesia's Railway Polytechnic (Politeknik Perkeretaapian) is being advertised on BreachForums. Student, staff and possibly transport-sector records could be abused for identity theft and phishing. It is low priority for LATAM monitoring but a real institutional leak.Leak● 50
Filtración de base de datos del Ministerio de Asuntos Religiosos de IndonesiaA database belonging to Indonesia's Ministry of Religious Affairs (Kementerian Agama) has surfaced on BreachForums. A government ministry holds citizen, employee and licensing records, so exposure enables identity theft, phishing and further intrusion. Even outside LATAM, a leaked ministerial database is high-value for fraud and state-targeting.Leak● 28
Base de datos de empresas de la regencia de Belu, Indonesia, a la ventaA database described as belonging to businesses in Belu regency (Kabupaten Belu), Indonesia, is being offered on BreachForums. Regency-level business and administrative data can fuel targeted fraud and social engineering against local firms. It is a low-priority item for an AR-LATAM operator but a genuine institutional leak.Leak● 40
Base de datos de Notion con 110 millones de registros a la ventaA seller claims to offer a 110-million-record Notion data set, a large volume for a widely used workspace platform whose documents often hold corporate and personal secrets. The post dates to late June 2026, so it is not a fresh alert, but the volume and sensitive-content risk keep it worth tracking. Defenders should assess whether their organization's workspace data appears in such claims.