BRIEFLeakhighP78
Data leak of Guerrero State Ministry of Education (SEG), Mexico
Secretaría de Educación de Guerrero (SEG)
Detected18 October 2026 · 07:26 UTC
Documents advertised as belonging to Mexico's Guerrero State Ministry of Education (SEG) are being distributed, reportedly 28k records plus a list of @gob email accounts. Government email directories are high-value for targeted phishing, invoice fraud and lateral movement into education-sector systems. Although the exact posting date is unknown, the size and the .gob mail component make it worth immediate verification by Mexican education authorities.
CategoryLeak
Severityhigh
Priority score78
Detected18 October 2026 · 07:26 UTC
Leak● 48
Base de datos de Perú, Uruguay y Chile publicada en DarkForumsA DarkForums user posted a 'DATABASE' labeled PE, UR, CL minutes ago without naming the source organization. The country codes point to a dump or combolist targeting Peru, Uruguay and Chile that may contain corporate or public-sector credentials. Verification is needed urgently: if .gob.pe, .gub.uy or .gob.cl emails appear, the impact escalates immediately.Leak● 58
Brecha de datos de Getir: 900.000 y 1,2 millones de registrosA BreachForums post dated October 18, 2026 advertises a Getir breach spanning roughly 900,000 and 1.2 million records across two datasets. The Turkish rapid-delivery firm holds customer PII, delivery addresses and order history, ideal for phishing and account takeover. Defenders should check leaked emails against corporate SSO and watch for credential-stuffing spikes.Leak● 50
Base de datos de Revolut con datos de tarjetas a la ventaA seller is advertising a 'full Revolut database' of roughly 100k lines including credit card data, framed as a 2026 leak. Fintech customer data with card numbers enables card-not-present fraud and account takeover, though the claim is unverified and such ads are frequently recycled or inflated. Fraud and CTI teams should monitor for card BINs and customer records matching this listing before it spreads to carding shops.Leak● 70
SCARLETTGROUP afirma haber comprometido a NBCUniversalThe group SCARLETTGROUP posted a breach claim against NBCUniversal on BreachForums dated today, meaning data or samples may already be circulating to buyers. Media conglomerates hold employee, vendor and production data that supports downstream extortion and BEC against partners. Even before verification, this is a fresh public claim that defenders of media-sector entities and their suppliers should triage now.
Leak● 93
Filtración de 7 GB de base de datos del Gobierno de YucatánA forum user (Returnero) just published a 7 GB dump attributed to the Yucatán state government domain (yucatan.gob.mx), posted minutes before collection. Government portals concentrate citizen records, internal contacts and employee credentials, so the dump can fuel phishing against state offices and credential stuffing on .gob services. Defenders in Mexican state government should assume exposure and check for credential reuse on VPN, mail and portal accounts.Leak● 55
Brecha total del servidor del regulador bursátil de Turquía (SPK)A threat actor claims a full server compromise and root-level data leak of Turkey's Capital Markets Board (SPK), a national financial regulator, including source code. Source and internal data from a government financial authority pose regulatory and supply-chain risk. Although outside LATAM, it is a template worth tracking for how regional financial regulators could be targeted.