BRIEFLeakhighP84
Data leak of 345,209 Banco Santa Fe customers
Banco Santa Fe (Argentina)
Detected23 October 2026 · 02:36 UTC
A 345,209-record Banco Santa Fe customer database is circulating with names, CUIT, DNI, email, phone and VIP-status flags. As the province's state-owned bank, the exposure enables identity fraud, account-takeover attempts and targeted phishing against provincial taxpayers and public employees. DNI+CUIT pairs are prime pretext material for social engineering against both the bank and the provincial government.
CategoryLeak
Severityhigh
Priority score84
Detected23 October 2026 · 02:36 UTC
Leak● 63
Venta de base de datos de Zenith Bank con 30M registrosA listing advertises a 30 million-record database attributed to Nigeria's Zenith Bank for sale. Bank customer records at this scale expose account details and PII used in fraud, phishing and account takeover. Financial defenders should monitor for downstream abuse of the exposed customer data.Leak● 55
Venta de base de datos de Rand Mutual Assurance (366 GB)A seller is offering 366 GB of data attributed to South Africa's Rand Mutual Assurance, a workplace-injury insurance provider. At that volume the dump likely contains customer, policy and claims records. Large insurer databases enable identity fraud, insurance fraud and targeted phishing against policyholders and partners.Leak● 60
Filtración de datos KYC de la fintech RevolutA BreachForums post advertises a 'fresh 2026' leak of Revolut KYC data — the identity-verification records a bank holds on customers, such as IDs, selfies and addresses. KYC leaks of this kind directly fuel account takeover, synthetic identity and targeted fraud. Financial-sector defenders should watch for credential and identity abuse tied to the exposed records.Leak● 55
Filtración de 200.000 clientes de Getir y BiTaksiA forum actor is distributing a new dump of roughly 200,000 Getir and BiTaksi customers, posted on 19 October 2026. The records cover users of Turkey's largest delivery and ride-hailing apps, exposing contact and account data useful for credential stuffing and SMS phishing. It matters to defenders outside the region only as a source of reused-credential exposure and fraud infrastructure.Leak● 68
Presunta filtración KYC de Revolut de 2026 a la ventaA forum user claims to hold a fresh 2026 Revolut KYC dataset, posted today and still unverified. If genuine, KYC material (ID documents, selfies, addresses) is far more damaging than ordinary account data because it fuels full identity takeover and passes liveness checks. Treat as unconfirmed but monitor for correlated Revolut phishing and account-takeover activity.Leak● 38
Base de datos de 128K de kiassure.com a la ventaA seller lists a 128K-record database attributed to kiassure.com, a relatively small dataset compared with major breaches. Even a mid-size dump of emails, hashes or PII enables credential stuffing and targeted phishing campaigns. The company's profile and the data's authenticity are unconfirmed, keeping overall impact limited.