BRIEFLeakhighP74
IZIPAY Peru payment database leaked, 3.64M records
IZIPAY (Peru)
Detected14 September 2026 · 14:12 UTC
A merchant and payment database tied to Peru's IZIPAY platform, roughly 3.64 million records, is being offered on a darkweb forum. It likely contains customer, card, and transaction data affecting Peruvian merchants and consumers. This is a serious LATAM financial-sector leak that can fuel fraud and phishing campaigns.
CategoryLeak
Severityhigh
Priority score74
Detected14 September 2026 · 14:12 UTC
Leak● 47
Filtración de datos del bufete Becker & PoliakoffA freshly posted thread on the Spear Leaks forum (spear.cx) advertises a data breach at Becker & Poliakoff, a US law firm with over 170 lawyers, published within the last hour on 29 October 2026. Law firms hold privileged client information and confidential case material, making leaks especially sensitive. The exposure could enable targeted phishing and extortion against clients and staff.Leak● 57
Base de datos de la brasileña Dripay a la venta en DarkForumsA seller using the alias 'samleego' listed a purported database belonging to Brazilian payments company Dripay for sale on DarkForums on 29 October 2026. The post advertises stolen records from a Latin American financial-services firm, a sector carrying high fraud and account-takeover risk. If genuine, exposed customer data could fuel payment fraud across Brazil and neighbouring markets.Leak● 62
Filtración de base de datos de Acadian Ambulance Services (600.000 registros)A user 'Torax2020' posted a 600,000-record database attributed to US emergency medical provider Acadian Ambulance Services on DarkForums on 29 October 2026. EMS providers hold sensitive patient and personnel data, making this a high-impact healthcare-sector leak. If authentic, exposed medical and identity data could enable fraud against patients and staff and should be triaged quickly.Leak● 48
Dump de 27,1M de registros URL:LOG:PASS en DarkForumsA 27.1 million-record URL:LOG:PASS stealer-log dataset labeled 'PRIVATE UHQ' was posted on 29 October 2026 and mirrored across several forums by the cloudmarket/D4rkNetHub actor. It aggregates credentials and browsing URLs harvested from infostealer infections, so it likely contains corporate SaaS, VPN and email logins. Organizations should assume some employee credentials may be present and hunt for password reuse and credential-stuffing risk.Leak● 55
Filtración de datos de la plataforma de reservas TripWorksA DarkForums thread provides a downloadable leak attributed to TripWorks, a travel and tour booking platform, with the discussion spanning 13 pages indicating ongoing interest. Booking platforms hold customer contact, payment and itinerary data useful for fraud and phishing. The exact date is unclear, so defenders should confirm authenticity and recency before acting.Leak● 38
Base de datos de 1,8 millones de ciudadanos mexicanos (2023)A file labelled as a 1.8 million-record Mexican citizen database, dated 2023, was reposted to DarkForums on 29 October 2026. It likely contains personal identifiers such as names, IDs and contact data useful for identity fraud and phishing against Mexican residents. The data is old, making this a background exposure item rather than a fresh breach.