BRIEFLeaklowP48
Sample of Uruguay's Plan Ceibal citizen database posted
Plan Ceibal (Uruguay)
Detected9 November 2026 · 21:43 UTC
Reposts collapsed2
Actor 'LaPampaLeaks' published a sample of an alleged Plan Ceibal citizen database on 7 April 2026 on a Russian-language underground forum. Ceibal runs Uruguay's one-laptop-per-child education programme and holds student, teacher and family records, including data on minors. The post is roughly seven months old, so it is context for data-reuse monitoring rather than a fresh alert.
CategoryLeak
Severitylow
Priority score48
Detected9 November 2026 · 21:43 UTC
LeakPriority 62
Filtración de 9,11 millones de registros de la CAF de FranciaA DarkForums post from 9 November 2026 offers a 9.11-million-record dataset attributed to caf.fr, France's family benefits agency. CAF holds beneficiary identity, income and household composition data, which is high value for benefit fraud, targeted phishing and identity theft. The figure and the packaging suggest the file may be recycled from earlier leaks, so French public-sector and banking fraud teams should confirm exposure before acting.LeakPriority 73
Base de datos del municipio de Playa del Carmen a la ventaOn 9 November 2026 the user 'arcepah' listed a Mexican database labelled 'Playa del Carmen' in DarkForums' leaked-databases section. It appears to be a local-government dataset from the Solidaridad municipality in Quintana Roo, although the thread content and record count are not fully visible. Municipal resident, permit and service data fuels extortion, phishing and fraud against citizens, so local authorities should verify the claim.LeakPriority 82
Filtración de 2 millones de registros del sistema SIPI de la SIC de ColombiaOn 9 November 2026 a DarkForums post advertised more than 2 million records from Colombia's SIC SIPI system, offering a free CSV sample and paid full access. SIC is the national industry and commerce superintendency and SIPI holds industrial-property filings with company, representative and contact data. The exposure enables business email compromise, trademark fraud and impersonation of registered firms, so Colombian companies and the regulator should watch for reuse.LeakPriority 86
Filtración del padrón nacional y matrices de identidad de EcuadorA leak branded MORTEM and posted on BreachForums offers Ecuador's 'Padrón Nacional y Matrices' together with official business records, the type of civil and electoral registry data held by Registro Civil and the CNE. Such data supports mass identity fraud, shell-company creation and extortion of citizens and public officials. No publication date is visible in the thread, so the dump should be validated before it is treated as fresh.LeakPriority 92
Base de datos del RENIEC de Perú con 31 millones de ciudadanos a la ventaActor 'Ilkfozar' posted a 31-million-record dump of Peru's RENIEC national ID registry on DarkForums on 9 November 2026. It reportedly contains DNI numbers, names, birth dates and addresses of most adults in the country, enabling identity theft, SIM-swap and benefit fraud. Peruvian banks, telcos and public bodies that verify identity by DNI should treat this as a live exposure.LeakPriority 66
Brecha de datos de Digikala expone 3 millones de registrosOn DarkForums, a user (Pois0nTree) posted on 9 November 2026 a database of 3+ million records allegedly from Digikala, Iran's largest e-commerce platform. Such a large, fresh dataset typically includes customer identities and order data useful for fraud and phishing. Although outside Latin America, its size and recency make it a high-impact leak worth tracking.