BRIEFLeaklowP40
Data leak of Colombian insurer AXA Colpatria
AXA Colpatria
Detected28 October 2026 · 03:24 UTC
A RaidForums mirror thread advertises a downloadable database from AXA Colpatria, one of Colombia's largest insurers, exposing customer and policy data of a regulated financial entity. The thread carries no clear recent date and RaidForums mirrors usually re-post archival material, so this is likely a re-circulation of an older breach rather than a fresh incident. It still matters for Colombian banking/insurance supervisors and for fraud teams monitoring misuse of policyholder records.
CategoryLeak
Severitylow
Priority score40
Detected28 October 2026 · 03:24 UTC
Leak● 52
Base de datos de entidades gubernamentales sin identificar publicada en foroA BreachForums user ('haven') published a dump titled 'Random Govs' on 28 October 2026, apparently containing records tied to government entities, without naming the specific agencies or the country. The scale and provenance are unverified, but any government-oriented dataset warrants triage because the same records often feed credential-stuffing and social-engineering campaigns against public-sector staff. Because the region is unspecified, it cannot be ruled out that Latin American government accounts are included.Leak● 52
Filtración de base de datos del Partido dos Trabalhadores en Belém, ParáA BreachForums user 'bl33dr00t' posted a DATABASE leak tied to the Workers' Party (PT) branch in Belém, Pará, Brazil. Political party member and contact records are sensitive in the LATAM context and could enable phishing, doxxing or influence operations against party staff. The exact date and record count are not stated, so the freshness and scale should be confirmed before escalation.Leak● 84
Filtración de bases de datos del DNRPA, GDE y PAMI de ArgentinaA forum user 'cyk' posted a DATABASE leak on Spear Leaks covering three Argentine state entities: the national vehicle registry (DNRPA), the government document-management platform (GDE) and the pensioners' health system (PAMI). These are core public-sector systems holding citizen identity, vehicle and health data, so a consolidated dump would be a serious exposure of Argentine government records. The post dates to 2026-07-26, so it is not brand-new but remains highly relevant for defenders.Leak● 58
Presunta filtración de base de datos de Swiss MedicalA forum thread advertises a database labeled 'CH MedReg Swiss Medical', pointing to a possible breach of patient, member or claims data at Swiss Medical, a major Argentine private health provider. The listing sits behind a login wall, so record count and date are unverified, but healthcare data carries high regulatory, fraud and extortion risk. Health-sector defenders should treat this as a potential exposure of sensitive medical records pending confirmation.Leak● 44
Filtración de la base de datos del sitio griego daskaloi.grThreat actor DBHunter published a database attributed to the Greek site daskaloi.gr on the DarkNetArmy forum minutes ago; the record count and fields are not visible in the thread preview, so scale is unconfirmed. Fresh regional database drops of this kind are typically resold and reused for credential stuffing within days, so Greek organizations and the site's user base should verify exposure.Leak● 47
Base de datos de 1,6 millones de fullz estadounidenses (SSN/DL) a la ventaA BreachForums seller (Anonm0nk) is offering a 1.6 million-record US database of 'fullz' containing SSN, driver's license and personal identity fields. The scale and presence of government identifiers make it useful for identity theft, loan fraud and account takeover. US organizations and consumers should treat matched credentials and identifiers as exposed.