BRIEFLeakcriticalP76
Data leak of the São Paulo State Education Secretariat
Secretaria de Educação do Estado de São Paulo
Detected21 October 2026 · 16:36 UTC
A thread on the Exilio404 forum announces a data leak from the São Paulo State Education Secretariat, a Brazilian government body that handles records for millions of students, teachers and public-school staff. Leaked government HR and citizen data of this kind fuels identity fraud, targeted phishing of civil servants and further intrusion into state networks and suppliers. No posting date is visible in the capture, so the exposure window and record count must be confirmed before scoping impact.
CategoryLeak
Severitycritical
Priority score76
Detected21 October 2026 · 16:36 UTC
Leak● 32
Base de datos de Edmunds publicada por ShinyHuntersShinyHunters posted a database attributed to Edmunds, the US vehicle-shopping and dealer-inventory platform, in a thread dated January 2026. The dump is roughly nine months old, so it is not a fresh alert, but it is still useful for credential-stuffing and phishing checks against Edmunds-linked corporate accounts. Low regional relevance; action only if you hold dealer, supplier or partnership relationships with the company.Leak● 28
Registros internos del chat del grupo Black Basta disponibles para descargaA forum post offers a download of the leaked internal chat logs of the Black Basta ransomware group. The material appears to be a re-post of an earlier public leak rather than a fresh breach, but it still offers valuable insight into the group's TTPs, affiliates and tooling for detection and attribution.Leak● 50
Base de datos de la academia de la RFEF (113.681 registros) ofrecidaA clandestine forum thread advertises a database from academia.rfef.es, the training platform of Spain's Royal Football Federation, with about 113,681 records. It likely exposes students and technical staff with personal data and account material, valuable for targeted phishing and identity fraud against the sports sector. Authenticity should be verified and the entity notified to the Spanish data protection authority.Leak● 60
1,8 millones de credenciales de Privalia Brasil publicadasAn actor posted roughly 1.8 million URL:log:pass pairs attributed to Privalia, a fashion retailer with a large Brazilian customer base. The dump enables credential stuffing against customer accounts and staff panels, and its size suggests password reuse across other Latin American services. Defenders should force resets, watch for anomalous logins and check for employee credentials in the set.Leak● 38
Base de datos de 300K clientes de upcworld.ae a la ventaA database of roughly 300,000 records from upcworld.ae is offered for sale. Though moderate in size, it can expose customer and order data enabling phishing and fraud against the UAE-based retailer's clients. It is worth tracking as part of a seller's ongoing dump series.Leak● 44
Base de datos de Rotoris.com con más de 1M de registros a la ventaA database of more than 1 million records attributed to Rotoris.com is listed for sale on DarkForums. The volume suggests customer account and contact data rather than a trivial scrape. Buyers can pivot this into credential stuffing and targeted phishing against the site's user base.