BRIEFLeakhighP66
Data leak of Brazilian telecom operator Vivo
Vivo (Telefônica Brasil)
Detected3 October 2026 · 04:03 UTC
A data dump attributed to Brazilian telecom operator Vivo was posted in early August 2026. Telecom operators are critical infrastructure, and subscriber data leaks fuel SIM-swap, account takeover and targeted phishing. Brazilian telco defenders should verify the scope, check for credential reuse and notify affected subscribers.
CategoryLeak
Severityhigh
Priority score66
Detected3 October 2026 · 04:03 UTC
Leak● 52
Base de datos de clientes de MUFG Brasil a la venta (1,3M)A seller is offering a database of 1.3 million Mitsubishi UFJ Financial Group clients in Brazil linked to oil, gas and metal-mining trading. Financial PII at this scale enables targeted fraud, vishing and social engineering against high-value clients. Brazilian financial-sector defenders should hunt for credential reuse and pretexting attempts.Leak● 72
Filtración de base de datos de la Clínica OultonA database allegedly belonging to Clínica Oulton, an Argentine private health provider, was posted for download very recently. Health records are highly sensitive, and such leaks enable medical identity theft, extortion and targeted scams against patients and staff. Argentine healthcare entities should assess the exposure and warn affected individuals.Leak● 76
Filtración de base de datos del TECNM México (9,9M)A threat actor published a database tied to Mexico's TECNM, the national technological institute, containing about 9.97 million rows of likely student and staff records. As a public government-linked education body, the exposure enables phishing, credential stuffing and identity fraud at scale. Mexican public-education defenders should treat this as a fresh incident and start credential rotation and monitoring.Leak● 55
Filtración de datos de Fibextelecom/credix.net (Venezuela)A data leak of about 44,548 rows tied to credix.net / Fibextelecom, a Venezuelan credit and telecom service, was posted on a breach forum. Though mid-sized, the customer records can fuel fraud and phishing in a region with limited breach visibility. Defenders should confirm scope and warn affected users of identity-related risks.Leak● 60
Filtración de base de datos de la mexicana Anthea Freight SolutionsA threat actor posted a database allegedly belonging to Mexico's Anthea Freight Solutions, a logistics and freight firm, just minutes before collection. Such records typically include customer, contact and shipment data that fuel business email compromise and invoice fraud. Because it is fresh and regional, Mexican and LATAM partners should verify exposure of logistics and supply-chain data.Leak● 40
Filtración de 1,2 millones de registros de una institución educativa nigerianaA leak posted on TurkHackTeam claims a 1.2 million-record database from the Nigerian institution tarabaschttakum.edu.ng. It is a real academic entity, so exposed staff/student PII enables credential-stuffing and phishing. Though outside Latin America, it is a sizeable fresh breach worth noting for victims and for tracking re-use of the data in other campaigns.