BRIEFLeaklowP42
Data leak of John Lewis, Currys, PC World and American Airlines
John Lewis / Currys / American Airlines
Detected17 September 2026 · 11:12 UTC
A leak thread offers data linked to UK retailers John Lewis, Currys and PC World plus US airlines American Airlines and Southwest. Collections like this usually contain customer accounts and credentials that feed fraud and account takeover. It is outside LatAm, but the airlines' reach makes it worth tracking.
CategoryLeak
Severitylow
Priority score42
Detected17 September 2026 · 11:12 UTC
Leak● 46
Filtración completa de datos de Omni Hotels (EE. UU.)A reposted 'full leak' of Omni Hotels (USA) customer data is circulating on a Tor forum under the handle hexvior. Hotel guest databases hold names, contact details and sometimes loyalty or payment data, which are valuable for fraud and phishing. Because it is a repost, the data may be older, but defenders should still treat it as exposed.Leak● 68
Filtración de la base de datos de ciudadanía de PakistánA threat actor using the handle Growimo is distributing what is described as Pakistan's national citizenship database on DarkForums, a compilation of citizen identity records. National ID databases enable large-scale identity fraud, account takeover and targeted attacks against government services. Pakistani agencies and any organization that verifies identity documents should treat these records as compromised.Leak● 55
Filtración de 100.000 registros de múltiples sitios web mexicanosActor 'Lvrimer' is offering over 100,000 records reportedly scraped from multiple Mexican websites on DarkForums. The dataset likely aggregates user accounts, emails and personal details from several local platforms. It raises credential-stuffing and phishing risk for Mexican consumers and the operators of the affected sites.
Leak● 68
Base de datos de 600.000 registros argentinos a la ventaActor 'Kruxx' posted a 600,000+ record Argentina dataset on DarkForums on 1 November 2026. The records are not tied to a single named organization, suggesting an aggregated dump from local services or e-commerce. Defenders should triage for emails, hashed passwords and DNI data to detect credential-stuffing exposure.Leak● 93
Filtración de 11M de datos personales del Registro Electoral de ArgentinaA threat actor using the handle Gillulox published on DarkForums a dataset advertised as 11 million Argentine personal records tied to the 2026 electoral registry. Electoral data typically includes full names, national identity numbers (DNI), addresses and other identifiers, making it a high-value source for identity fraud, phishing and credential attacks against citizens and public-sector accounts. If authentic, this is a nation-scale exposure affecting the entire voter base and warrants immediate verification with the responsible electoral authority.Leak● 45
Filtración de datos personales del Gobierno de PakistánA DarkForums post dated 1 November 2026 by user 'Lyklekor' claims a leak of Pakistani government personal data. The specific agency, record volume and fields are not described, limiting immediate verification. It still signals continued posting of government citizen data on the same forum where regional leaks are traded.