BRIEFLeakhighP62
Data leak of Ecuadorian financial entity Sagrario
Sagrario (entidad financiera, Ecuador)
Detected10 November 2026 · 23:43 UTC
Under the handle Pheisito, a thread on DarkForums was posted announcing a data leak tied to Sagrario, an Ecuadorian financial entity, and later closed by staff. Although the listing is closed, it signals stolen customer or financial records belonging to a LATAM financial institution. Such data feeds fraud, account takeover and regulatory reporting for Ecuador's banking sector.
CategoryLeak
Severityhigh
Priority score62
Detected10 November 2026 · 23:43 UTC
LeakPriority 66
Base de datos de 25 millones de clientes del Qatar National Bank a la ventaA DarkForums listing offers a 2026 database for Qatar National Bank containing roughly 25 million customer records and 28,000 employee records. QNB is one of the largest banks in the Middle East, so a leak of this scale would expose extensive KYC, contact and account data. It drives fraud, account takeover and regulatory risk, though the entity is outside Latin America.LeakPriority 30
Base de datos de Mathway filtrada y disponible para descargaRaidForums hosts a long-running thread circulating a Mathway user database for download. The dump is a well-known, older education-platform breach rather than a fresh incident, so its current defensive value is mostly historical. It remains useful for detecting reused credentials tied to Mathway among staff or customers.LeakPriority 63
Base de datos de 600.000 clientes de Japan Tourist Service a la ventaA seller on DarkForums is offering customer information for roughly 600,000 clients of the Japanese travel agency otsinternational.jp. If genuine, the dataset exposes personal and contact details of travellers, enabling targeted phishing and identity fraud. Any organisation handling travel bookings with this provider should treat related accounts and communications as potentially compromised.LeakPriority 54
Base de datos de 1,2 millones de registros de Transfast a la ventaA seller using the handle Marx posted on DarkForums a database of Transfast, a money-transfer/fintech provider, containing roughly 1.2 million records. Such data typically includes customer PII and financial details useful for fraud and account takeover. Organizations in the payments sector should verify exposure and monitor for misuse.
LeakPriority 93
Filtración de base de datos del Banco Central de Argentina (BCRA)A database attributed to the Banco Central de la República Argentina (BCRA) has been posted for distribution on BreachForums. The central bank is core financial and critical infrastructure, so any exposure of internal or customer data carries systemic risk. Defenders should treat this as a potential high-impact breach pending verification of scope and authenticity.LeakPriority 40
Filtración de 7,7 millones de cuentas de Armor GamesA forum post offers roughly 7.7 million email:password lines attributed to Armor Games in plaintext. It is a large volume of credentials but for a gaming site, likely a repost of previously known data. Useful for credential-reuse awareness but not tied to government or critical infrastructure.