BRIEFLeakhighP66
Data leak of 940 UASLP students including photos
UASLP (Universidad Autónoma de San Luis Potosí)
Detected13 September 2026 · 05:12 UTC
A threat actor published a database of roughly 940 students from the Universidad Autónoma de San Luis Potosí (Mexico), bundling personal data with facial photographs. The combination of identity data and biometric images enables identity theft, harassment and social-engineering attacks against the institution. It is a fresh, regionally relevant education-sector leak that defenders in Latin America should track.
CategoryLeak
Severityhigh
Priority score66
Detected13 September 2026 · 05:12 UTC
Leak● 42
Base de datos de banca y forex con documentos comprometidos a la ventaA PwsForums seller advertises an 'exclusive fresh leak' bundling a forex and banking customer database with compromised identity documents. No victim organization, record count, or sample is disclosed, so the claim cannot be validated and may be marketing hype. If real, such combined data enables account takeover, fraudulent onboarding and KYC bypass against financial institutions.Leak● 58
Supuesta filtración de datos de 8.000 efectivos del Ejército de EE. UU.A seller in the marketplace section of PwsForums claims to hold a database with information on 8,000 US Army personnel. No sample, record schema, or publication date is provided and the thread is framed ideologically, so authenticity is unverified. If genuine, the records would expose service members to targeting, phishing and identity theft, and would be quickly reused by other actors.Leak● 45
Publican 55 millones de registros URL:usuario:contraseñaA forum member posted a 55-million-line URL:login:password dataset on SpyHackerz, described as freshly harvested, most likely from infostealer infections. At this volume it is not a generic small combolist; it likely contains valid corporate and personal credentials across many services, enabling account takeover and initial access into organizations that have not rotated passwords. Defenders should assume some of their users' credentials are present.Leak● 48
Base de datos de 200.000 registros de Keralty US a la ventaA DarkNetArmy thread advertises a complete 200,000-record database tied to Keralty US, a healthcare provider, meaning patient and administrative data may be involved. Healthcare records carry high regulatory and fraud risk, and the listing claims the dataset is complete, which raises the likelihood it is being sold or traded rather than shared for free. Keralty also operates extensively across Latin America, so similar datasets may exist for its regional entities.Leak● 52
Filtración de 11 millones de clientes de la japonesa StarxA dataset claimed to hold 11 million customer records from starx.co.jp, spanning 2017 through October 2026, is being circulated on the DarkNetArmy forum. If authentic, this is a multi-year history of customer data, which is highly valuable for credential stuffing and identity fraud against a Japanese web service. The recency of the data window suggests the exposure may be current rather than a legacy dump.Leak● 62
Base de datos argentina de Ábaco Informática a la ventaA seller using the handle MangaComics posted on the DarkNetArmy forum, roughly nine minutes before collection, a database attributed to Argentine company Ábaco Informática. The record count and fields are not disclosed in the listing, but it appears in the unverified sellers marketplace, so the data may include customer or corporate records. Any Argentine organization handling client data should treat this as a possible local leak and check for reuse of exposed identifiers.