BRIEFLeakhighP63
PII database leak of Mexican retailer Cosmotienda
Cosmotienda
Detected27 October 2026 · 07:29 UTC
A PII database attributed to the Mexican retailer Cosmotienda was released on the BlackBones carding forum by user Jaded on 23 August 2026. Customer names, contact details and possibly payment data expose Mexican consumers to fraud and credential abuse. It is one of the few LATAM-targeted leaks worth monitoring even though it is a couple of months old.
CategoryLeak
Severityhigh
Priority score63
Detected27 October 2026 · 07:29 UTC
Leak● 42
Filtración de base de datos y acceso admin de foodtrack.frA leak combining a database dump and admin access to the French marketplace foodtrack.fr was shared as a freebie on the BlackBones carding forum on 19 August 2026. Admin-level access to a commerce platform enables tampering, further data theft and payment abuse. It is a genuine named-org compromise but dated and outside the AR-LATAM focus.Leak● 60
Filtración de datos de pacientes del hospital indio Aakash HealthcareA database of patient records from Aakash Healthcare, an Indian hospital chain, was posted for free on BreachForums (bf.st) by user r4ng3r on 27 October 2026. Exposure of medical and personal data enables identity theft, targeted phishing and extortion against patients. Healthcare entities should treat it as confirmed and monitor for downstream fraud.Leak● 64
Base de datos de 2,7 millones de registros de Sysco a la ventaA forum posting advertises a database of roughly 2.7 million records tied to US food-distribution giant Sysco. If authentic, it exposes a large business-contact dataset valuable for business email compromise and phishing against Sysco and its supply-chain partners. No publication date is shown, so the recency and content should be verified before acting.Leak● 66
Filtración de base de datos del Central Bank of IndiaUser 'KillerRabbit' shared a database purportedly belonging to the Central Bank of India containing addresses, phone numbers and email addresses. Although the fields are contact data rather than credentials, exposure of a state-owned bank's customer records enables targeted phishing and account-takeover attempts. No publication date is visible, so freshness should be verified before escalation.Leak● 70
Base de datos de leads de Bittools.es (España) de 8,2M+ a la ventaA forum user (Mr_Racco...) is advertising an 8.2M+ Spanish business/lead database derived from Bittools.es on BreachForums. The dataset likely contains company and contact records usable for targeted phishing and B2B fraud across Spain. Sales of large curated lead sets enable widespread social engineering against Spanish organizations.
Leak● 82
Filtración de base de datos del Hospital Nacional Cayetano Heredia (Perú)A 14.8M-record database attributed to Peru's Hospital Nacional Cayetano Heredia, a major public reference hospital, has been posted on BreachForums. The volume suggests patient and staff records, including potentially sensitive health and identity data. This is critical-infrastructure health data in Latin America and warrants immediate exposure assessment and notification planning.