BRIEFLeakcriticalP80
Mexico's CONALEP budget database leaked
CONALEP (Colegio Nacional de Educación Profesional Técnica, México)
Detected18 October 2026 · 01:26 UTC
A threat actor claims to have dumped CONALEP's budget database (28,418 records) together with a compromised national evaluation system of Mexico's national technical-education body. Exposure of budget and evaluation data of a federal education institution can enable fraud, lateral targeting of government systems and impersonation of staff. Mexican public-sector defenders should validate the leak and monitor for credential reuse.
CategoryLeak
Severitycritical
Priority score80
Detected18 October 2026 · 01:26 UTC
Leak● 38
Redifusión del megapack de 7,3 TB de ShinyHuntersA member posted a 7.3 TB torrent of the ShinyHunters megapack, a well-known aggregate of previously leaked datasets rather than a new breach. While vast in scale, it is historical redistributed data, so it is not a fresh compromise requiring immediate alerting. It is still useful for credential-reuse checks against exposed corpora.Leak● 70
Filtración de credenciales de Áncash (Montufar), PerúA forum user published a set of leaked credentials tied to Montufar, in Peru's Áncash region, a government-related jurisdiction in Latin America. The fresh (Oct 18, 2026) posting means the credentials may still be valid and could enable intrusion into regional/municipal systems or email accounts. Defenders in Peruvian public administration should treat these accounts as compromised and force resets.Leak● 48
Filtración de 100.000 registros de PeakManager.jp (Japón)A 100,000-record database belonging to the Japanese company PeakManager.jp was published on a leak forum within minutes of posting. A dump of a commercial organization's account/customer data can fuel credential-stuffing and phishing against its users. Monitor for resale and reuse of the data; lower regional priority but a real, fresh organization leak.Leak● 35
Base de datos del Ministerio de Salud Pública de Ecuador a la ventaA database attributed to Ecuador's Ministry of Public Health (2025) is being listed on a leak forum, implying exposure of national health data. Government health records are critical infrastructure with high PII value for identity fraud. The post dates to August 2025, so it is not fresh but is worth tracking for LATAM public-sector exposure.Leak● 42
Filtración de 170k pacientes del Hospital Clínica San Agustín (Ecuador)A dataset covering approximately 170,000 patients of Ecuador's Hospital Clínica San Agustín is being offered for sale/leak. Such records typically contain names, IDs and clinical details, creating fraud and privacy risk for patients. The post is from May 2026, so it is stale and not a fresh alert.Leak● 45
Filtración de 120k datos médicos de laboratoriomedicos.com (Ecuador)Roughly 120,000 medical records tied to Ecuadorian medical laboratory laboratoriomedicos.com are offered on a leak forum. The dataset likely includes patient PII and diagnostic data, sensitive under health-privacy rules. The post dates to July 2026, so it is not a fresh alert but remains relevant for tracking LATAM healthcare exposure.