BRIEFGov / MilitaryhighP63
Data breach of Brazil's FEMARH Roraima gov.br agency
FEMARH Roraima (gov.br)
Detected10 November 2026 · 18:43 UTC
A BreachForums/xReactor thread advertises a data breach of FEMARH, the Roraima state environmental and water resources agency on a Brazilian .gov.br domain. Government data exposures put civil servants and citizens at risk of phishing, identity fraud and further intrusion into public systems. Although the exact publication date and record count are unclear, a named government body compromise is relevant to Brazilian public-sector defenders.
CategoryGov / Military
Severityhigh
Priority score63
Detected10 November 2026 · 18:43 UTC
Gov / MilitaryPriority 65
Filtración de datos del gabinete del Primer Ministro de ItaliaA seller on DarkForums (user 'Rozwawyn', posted 14 Oct 2026) is offering leaked data attributed to the Italian Prime Minister's Office. Government data of this kind can expose internal communications, staff PII and sensitive policy material. Though the post is a few weeks old, any confirmed leak of a national executive body warrants verification and monitoring.Gov / MilitaryPriority 66
Filtración de datos del gobierno de la ciudad de Augusta (augustaga.gov)A leak of data from the City of Augusta, Georgia (augustaga.gov) was posted on DarkForums on 14 October 2026. A municipal government breach can expose citizen records and internal systems. Although outside LATAM, it is a fresh public-sector leak worth monitoring for potential data reuse.Gov / MilitaryPriority 63
Base de datos RENAPER (DNI) de Argentina filtrada, ~19M personasA DarkForums thread offers roughly 19M full personal records from Argentina's RENAPER national identity registry, including DNI data. RENAPER underpins national ID issuance, so this data fuels identity fraud, account takeover and government-service impersonation. No fresh date is visible and it closely resembles the historic 2021 RENAPER breach, so it may be a reposted dataset rather than a new compromise.Gov / MilitaryPriority 90
Base de datos del RENAPO de México a la ventaThreat actor 'cutzinger' is advertising on DarkForums what is claimed to be a database from Mexico's RENAPO national population and identity registry. RENAPO holds CURP, full names, birth dates and identity records for the entire Mexican population, so a genuine dump enables mass identity fraud and impersonation. Mexican government bodies and financial institutions should urgently verify authenticity and assess exposure.Gov / MilitaryPriority 85
Filtración de base de datos de la Secretaría de Educación de MichoacánA database belonging to the Secretaría de Educación de Michoacán (Mexico) is being leaked on DarkForums by the user 'arcepah', exposing records tied to the state's public education ministry. Leaked government education data directly enables identity fraud, targeted phishing of public employees and further intrusion into .gob.mx systems. Mexican public-sector defenders should treat this exposure as confirmed and closely monitor for credential reuse and follow-on attacks.Gov / MilitaryPriority 88
Base de datos de la Policía Civil de São Paulo a la ventaA threat actor is selling a database allegedly belonging to the São Paulo Civil Police (Polícia Civil de São Paulo), a Brazilian state law-enforcement agency, on BreachForums' leak marketplace. Police records typically include officer and citizen PII, case data and identifiers that enable targeted fraud, doxxing and attacks on law-enforcement personnel. This is a high-value government target in Latin America and warrants urgent validation and containment.