BRIEFLeakhighP70
INSS Spain pensioner database leak: 3.18M records
INSS (Instituto Nacional de la Seguridad Social), España
Detected16 September 2026 · 13:12 UTC
A database of 3,184,288 records linked to the Spanish Social Security institute (INSS), covering pensioners, is being sold on the DarkForums marketplace. It exposes names, national ID numbers and benefit/pension details of elderly citizens, a high-value pool for identity theft, pension fraud and social-engineering of public services. Although Spain sits outside LATAM, a government benefits database at this scale is a serious exposure that defenders in Spanish-speaking regions should track.
CategoryLeak
Severityhigh
Priority score70
Detected16 September 2026 · 13:12 UTC
Leak● 38
Fuga de datos de clientes de Baydoner.com (1,3M pedidos)Customer orders and personal data for Baydoner.com, a restaurant chain, totaling roughly 1.3M records, are being offered on the DarkNetArmy forum. The listing is fresh (posted today), which raises the chance the data is current and usable for phishing or fraud. Relevance is limited because the victim is outside the AR-LATAM region.Leak● 42
Base de datos de Baker Distributing a la ventaData belonging to Baker Distributing Company, a US HVAC and refrigeration parts distributor, has been listed for sale on the DarkNetArmy forum. The post is only minutes old, indicating a fresh exfiltration or intrusion event rather than a recycled dump. It matters for supply-chain visibility of an industrial distributor, though the victim is outside the AR-LATAM region.Leak● 40
Filtración de bases de datos del gobierno de SomalilandiaA freshly posted thread claims a leak of Somaliland government databases, potentially exposing citizen and administrative records. Government data leaks of this type can enable identity fraud and further intrusion into public systems. It is low priority for AR-LATAM defenders but worth noting for regional government-target monitoring.Leak● 56
Base de datos de banco comercial de Tailandia a la ventaA seller is advertising a database allegedly belonging to a commercial bank in Thailand, likely containing customer PII and financial records. Banking data of this kind enables account fraud, phishing and further intrusion into the institution. Posted within the last three weeks, it remains relevant for financial-sector defenders.Leak● 60
Filtración de base de datos KYC de TuLotero.esA seller is offering the KYC database of the Spanish lottery platform TuLotero.es, which typically contains full identity data: names, ID documents, addresses and verification records. Because KYC files allow direct identity theft and account takeover, exposure affects real Spanish-speaking users and can fuel downstream fraud. Posted just hours ago, it is still time-sensitive for defenders monitoring Iberian/Hispanic targets.Leak● 26
Filtración de base de datos del Politécnico Ferroviario de IndonesiaA database of Indonesia's Railway Polytechnic (Politeknik Perkeretaapian) is being advertised on BreachForums. Student, staff and possibly transport-sector records could be abused for identity theft and phishing. It is low priority for LATAM monitoring but a real institutional leak.