BRIEFLeakhighP58
Citizen data leak from Malang regency government, Indonesia
Sumbermanjing Wetan, Malang, East Java (Indonesia)
Detected11 September 2026 · 10:12 UTC
A full citizen dataset for the Sumbermanjing Wetan district of Malang, East Java, Indonesia, is being offered, containing government resident records. A complete population record leak of this kind enables mass identity theft, fraud and targeting of citizens. It is outside the AR-LATAM region but is a genuine large government database exposure worth tracking.
CategoryLeak
Severityhigh
Priority score58
Detected11 September 2026 · 10:12 UTC
Leak● 32
Filtración de base de datos de la plataforma YouNowA moderator on Spear's leak forum posted a database belonging to YouNow, a US-based live-streaming and social platform with reported multi-million-dollar revenue and a large user base. The thread dates to late July 2026, so it is roughly three months old and not a fresh alert, though the dataset may still be circulating. User account and personal data of a consumer platform is relevant for credential-reuse and phishing risk to its user base.Leak● 68
Venta de datos de Pubali Bank Securities (Bangladesh)Seller 'bytetobreach' posted on Spear's marketplace a PGP-signed offer titled 'Bengali Carnage' advertising data from Pubali Bank Securities, a Bangladeshi brokerage. The listing is roughly one hour old, suggesting a fresh or recently obtained dataset tied to a regulated financial entity. Bank/brokerage customer and trading data is high-value for fraud and identity theft, so regional financial-sector defenders should treat it as a live exposure.Leak● 72
Base de datos del Gobierno de Zambia, 34,1 millones de registrosBreachForums user Mr_Raccoon is advertising a 34.1 million-record database attributed to the Government of Zambia, tagged 2026 and posted in October, which points to a national-scale dump of citizen or civil-servant data. Leaks of this size enable mass identity fraud, credential reuse against state portals and targeted phishing of public employees. Although outside Latin America, it is a confirmed government leak worth tracking for regional impersonation and cross-border fraud patterns.Leak● 65
Venta de datos del bróker Pubali Bank Securities de BangladésThe actor bytetobreach is selling 'Bengali Carnage', a dataset attributed to Bangladeshi brokerage Pubali Bank Securities, on the Spear.cx marketplace. Leaked brokerage/client records enable account takeover, targeted phishing and investment fraud. Financial defenders should treat it as probable exposure and watch for KYC or login data circulating.Leak● 43
Filtración gratuita de base de datos de salud de EE. UU. con 27.000 registrosA user (Vyntra) on BreachForums is freely distributing a US healthcare database containing more than 27,000 records. Even at modest scale, healthcare data carries high sensitivity (patient identifiers, potentially clinical or billing details) and free release accelerates abuse. Organizations in the US health sector should assess whether their data is present and prepare for identity-fraud and phishing fallout.Leak● 70
Base de datos de 1,5 millones de registros del minorista francés LDLC a la ventaActor SUB-ZER0 posted a 1.5M-record database reportedly from French electronics retailer LDLC (ldlc.com) on DarkNetArmy. A leak of this size exposes names, emails and possibly order or credential data for a large e-commerce customer base. Defenders should monitor for credential stuffing and phishing abusing the LDLC brand.