BRIEFLeakhighP56
Student data leak at Morocco's Ministry of Education
Ministry of Education of Morocco
Detected1 November 2026 · 13:24 UTC
An actor using the handle Nyrsafel published what is described as student data belonging to Morocco's Ministry of Education on DarkForums. The dataset involves a government education body and personal data of students and staff, a sensitive category prone to identity fraud and targeted phishing. Government authorities should treat the records as compromised and assess regulatory exposure.
CategoryLeak
Severityhigh
Priority score56
Detected1 November 2026 · 13:24 UTC
Leak● 45
Base de datos del seguro social chino (474.000 filas) a la ventaA BreachForums seller is offering a 474,000-row database attributed to a Chinese government social security bureau, likely containing citizen identity and social-insurance records. Such data supports identity fraud and large-scale targeting of government beneficiaries, and the sample should be validated before resale spreads it further. Impact for Latin American defenders is limited, so it warrants tracking rather than immediate regional action.Leak● 50
Filtración de datos de Main Line Health con SSN y correos de pacientesA BreachForums thread advertises a database attributed to mainlinehealth.org containing roughly 17,700 rows, including more than 8,000 Social Security numbers and 468 email addresses. If genuine, the SSN concentration points to patient or employee identity data from a US hospital network, enabling identity theft, medical fraud and targeted social engineering. Healthcare defenders should verify the sample and prepare notification and SSN-monitoring steps.Leak● 45
Base de datos de forex de 400.000 registros de Dinamarca y Países Bajos a la ventaA seller is offering a 400,000-record forex database covering Denmark and the Netherlands on BreachForums. The dataset appears to be customer and investor lead data from forex trading platforms, valuable for fraud, phishing and targeted scams. Financial firms and regulators in those markets should treat the records as compromised.Leak● 48
Filtración de 1.400 documentos financieros de Zurich Insurance GroupA BreachForums member posted a leak of more than 1,400 files attributed to Zurich Insurance Group, including financial reports, contracts and internal documents. Although smaller than a full database, contracts and financials can expose business relationships and sensitive commercial data. Insurers and their partners should review whether proprietary documents are circulating.Leak● 52
Base de datos de la mexicana XPeranto con más de 55.000 registros a la ventaUser 'Lvrimer' posted on DarkForums on 1 November 2026 offering a database of more than 55,000 records allegedly extracted from xperanto.com.mx, a Mexican technology/hosting provider. The dataset exposes customer identifiers that can be reused for phishing, credential stuffing and account takeover against Mexican users. It is a fresh, region-specific leak and should be validated and tracked for resale or wider distribution.Leak● 44
Filtración de base de datos de Yale University PressA DarkForums thread lists a database from Yale University Press tied to the yalebooks.yale.edu domain, with no publication date visible and a small follower count in the thread. The likely contents are customer and order records from an academic publisher rather than sensitive government data. It matters mainly for credential reuse and targeted phishing against the publisher's customers and staff.