BRIEFLeakhighP52
Health data leak of 1.8M citizens in Shandong, China
Shandong province health authority
Detected16 September 2026 · 09:12 UTC
A database with sensitive detail on roughly 1.8 million residents of Shandong province, China, including health codes and national ID numbers, is being shared in CSV form. This is government-linked citizen health data, enabling identity theft and targeted fraud. Defenders tracking regional data-broker activity should note the reuse potential of such identifiers.
CategoryLeak
Severityhigh
Priority score52
Detected16 September 2026 · 09:12 UTC
Leak● 40
Base de datos de Notion con 110 millones de registros a la ventaA seller claims to offer a 110-million-record Notion data set, a large volume for a widely used workspace platform whose documents often hold corporate and personal secrets. The post dates to late June 2026, so it is not a fresh alert, but the volume and sensitive-content risk keep it worth tracking. Defenders should assess whether their organization's workspace data appears in such claims.Leak● 58
Base de datos de Coupang (Corea del Sur) ofrecida en foroA data set tied to Coupang, South Korea's largest e-commerce platform, is being offered in a darkweb databases section with a fresh post. Coupang holds order, address and payment-adjacent data for tens of millions of users, so a verified leak carries serious fraud and privacy impact. Defenders should watch for credential reuse and resale of Coupang customer data.Leak● 45
Base de datos de Notion con 110 millones de registros a la ventaA seller is offering a 110-million-record Notion workspace database, posted in June 2026. Such data often includes corporate notes, embedded credentials and project details valuable for follow-on intrusion. Organizations using Notion should audit for exposed secrets and monitor for credential reuse.Leak● 52
Volcado de datos de 13 millones de ciudadanos de CanadáA 13 million-record dump of Canadian citizen data is circulating in underground forums. Identity data of this scale fuels identity theft, benefits fraud and account takeover across the population. Although outside AR-LATAM, it is a landmark government-scale leak that CTI teams should track for reused data and linked campaigns.Leak● 62
Base de datos de CenterPoint Energy (Texas) con 3 millones de filasA 3,093,459-row database attributed to CenterPoint Energy, a major Texas electric and gas utility, is being offered on BreachForums. Utility customer and operational data can enable billing fraud and reconnaissance for attacks on critical energy infrastructure. Energy-sector defenders should verify the exposure and warn affected customers.Leak● 90
Filtración gratuita de 3,6 millones de registros de ArgentinaA threat actor is freely distributing a database of roughly 3.6 million Argentine records on DarkForums, posted today. The dataset likely contains personal and contact data of Argentine citizens, enabling phishing, identity fraud and credential stuffing. AR-LATAM defenders should urgently obtain and validate the dump to identify and notify affected parties.