BRIEFLeakhighP62
Leak of Cosmotienda Mexican customer PII database 2026
Cosmotienda
Detected23 August 2026 · 20:15 UTC
A leaked database allegedly containing Mexican PII from Cosmotienda was posted on a carding forum, exposing customer personal data. The exact number of records is unspecified, but the dump is dated 2026 and appears fresh. Latin American organizations should check for related credential or identity exposure and monitor for fraud.
CategoryLeak
Severityhigh
Priority score62
Detected23 August 2026 · 20:15 UTC
Leak● 50
Venta de base de datos de 1M de empresas e inversores de EE. UU.A carding forum advertises the sale of a 1M-record subset of an 8M-record USA business and investor database. The data likely includes contacts of U.S. companies/investors, enabling phishing or fraud. No posting date or victim organization is shown, so urgency is limited, but it is a sizable database for sale.Leak● 75
Filtración de datos de 11.5 millones de ciudadanos mexicanosA dataset reportedly containing records of 11.5 million Mexican citizens is being shared on a carding forum. The 1.36 GB leak likely includes personal information and could be used for identity theft, fraud, and phishing campaigns. Defenders in Latin America should monitor for exposure of their constituents and validate if the data overlaps with local databases.Leak● 78
Venta de base de datos de rezcomm.com con 17 millones de registrosA seller is offering the full database of rezcomm.com, a UK-based booking platform, with approximately 17 million users. The data likely includes personal and contact details of European customers and can be used for credential stuffing, phishing, and fraud. Defenders should check if their organizations rely on Rezcomm and monitor for related incidents.Leak● 78
Venta de base de datos de rezcomm.com con 17 millones de registrosA darknet seller is offering a database from rezcomm.com containing personal data of 17 million people, likely including names, emails, and phone numbers. The scale and freshness make it a significant data breach that could enable phishing, identity theft, and credential stuffing. Organizations in Europe should check if their users are affected.Leak● 85
Venta de 6.1 TB de datos personales de Gruppo Spaggiari Parma por $50kA seller is offering 6.1 TB of personal information allegedly from Gruppo Spaggiari Parma, an Italian IT provider for the education sector, for $50,000. The scale of the leak is enormous and could affect millions of individuals. Even though it is not in Latin America, this is a major incident worth monitoring.Leak● 85
Venta de base de datos de Gruppo Spaggiari ParmaAn underground seller is offering 6.1 TB of personally identifiable information (PII) from Gruppo Spaggiari Parma for $50,000. The dataset likely includes customer and employee records, representing a massive breach of an Italian IT/software firm. While not in Latin America, the size and potential for follow-on attacks make it relevant for tracking major data exposures.