BRIEFLeakhighP86
Santander Mexico data leak: 7 million records
Santander México
Detected14 October 2026 · 03:53 UTC
A threat actor is re-sharing a database allegedly holding 7 million Santander México customer records, with a new download link posted recently. Santander is one of Mexico's largest banks and part of the financial critical infrastructure, so exposure of customer and financial data fuels fraud, account takeover and targeted phishing. Defenders should treat this as an active redistribution and monitor for credential-stuffing against banking services.
CategoryLeak
Severityhigh
Priority score86
Detected14 October 2026 · 03:53 UTC
Leak● 55
Filtración del código fuente de Yandex en repositorios GitA thread posted within the last hours offers what is described as Yandex Git source code repositories. If genuine, leaked proprietary source lets attackers hunt for hardcoded secrets, internal endpoints and unpatched flaws across Yandex services and downstream integrations. Source-code exposure of a major technology and infrastructure provider is high-value for defenders to monitor.Leak● 60
Filtración de datos de la policía de Abu Dabi y DubáiA forum user published on 13 October 2026 what is claimed to be data belonging to the Abu Dhabi and Dubai police forces. Law-enforcement records of this type can expose officer identities, internal contacts and operational details that enable phishing and impersonation. It is a named government victim with a fresh dump, so it warrants tracking even though it sits outside the AR-LATAM region.Leak● 30
Filtración masiva de Diia (Ucrania): 20 M ciudadanosA thread re-shares a claimed 2025 mega leak of Ukraine's Diia state digital-identity platform affecting 20M+ citizens. The data involves national identity documents and personal records, making it highly sensitive, but the source is dated 2025 and is being recirculated rather than freshly breached. It is catalogued for context, not as a time-sensitive alert.Leak● 42
Base de datos del FCI Bank filtrada en foroA fresh DarkForums post advertises a leaked FCI Bank database, implying exposure of financial customer records. Banking datasets enable fraud, identity theft and credential attacks against the institution and its clients. The affected region and exact entity are unclear, so it is flagged for verification but still worth surfacing as a named financial leak.Leak● 54
Filtración de datos internos de Uber (uberhub, 20 M)A thread advertises data tied to uberhub.uberinternal.com with a claimed scale of over 20 million records. Internal corporate infrastructure data of this size can expose employee accounts, MDM and internal tooling, aiding lateral movement and follow-on intrusions. It merits attention for access and leak monitoring even though Uber is not a LATAM entity.Leak● 56
Filtración de datos de Air Miles España (travelclub.es)A database belonging to Air Miles España (travelclub.es), a Spanish loyalty and travel programme, is offered in a DarkForums leak thread. Such datasets typically contain personal data and account credentials of many members, enabling fraud, phishing and loyalty-point abuse. It matters for Spanish-speaking victims and for tracking a named corporate leak.