BRIEFGov / MilitaryhighP55
Data leak from Indonesia's Coordinating Ministry for Economic Affairs
Coordinating Ministry for Economic Affairs (Indonesia)
Detected16 October 2026 · 15:00 UTC
Reposts collapsed2
A database attributed to Indonesia's Coordinating Ministry for Economic Affairs surfaced on a dark web forum within hours of posting. Government ministry records can contain officials' and citizens' PII and internal contact data. If authentic, it raises targeted-phishing and intelligence-collection risks against a national economic body.
CategoryGov / Military
Severityhigh
Priority score55
Detected16 October 2026 · 15:00 UTC
Gov / Military● 66
Base de datos del Ministerio de Defensa de Israel a la ventaA dataset attributed to the Israeli Ministry of Defense is being offered on the forum, which if genuine would expose sensitive defense personnel or systems data. Offers like this fuel state-level targeting and credential abuse. Defenders should monitor for credential reuse and linked access sales.Gov / Military● 70
Filtración de código fuente de un programa del Gobierno del PSOE (psoe.es)Over 2 GB of source code from a Spanish government program tied to the PSOE party (psoe.es) has been posted on a dark web forum. Code exposure can reveal internal logic, hardcoded credentials and API endpoints, enabling follow-on intrusion. Spanish public-sector defenders should verify the exposure and rotate any secrets present in the code.
Gov / Military● 90
Base de datos sde.gob.ar con 800.000 registros publicadaA second thread by 'Returnero' advertises roughly 800,000 records from the Argentine government domain sde.gob.ar. The volume and government nature of the data raise the risk of mass identity misuse, credential abuse and social engineering against public entities. This should be treated as a fresh, high-impact leak requiring urgent analysis.
Gov / Military● 92
Filtración de base de datos del dominio gubernamental sde.gob.arThe actor 'Returnero' published a database from the Argentine government domain sde.gob.ar on a criminal forum just minutes ago. Exposure of a .gob.ar entity can enable targeted phishing, impersonation and further intrusion against state systems. Given its government origin, it warrants immediate verification and notification to Argentine authorities.Gov / Military● 71
Credenciales de acceso a la Armada de Malasia a la ventaA seller is offering 277 access credentials tied to Royal Malaysian Navy accounts, posted within the last day. Compromise of military identity/account credentials enables phishing, lateral movement and access to defense systems. Even outside LATAM, a named navy credential dump is high-value and time-sensitive for defenders watching state targets.Gov / Military● 50
Filtración de documentos técnicos internos del gobierno ruso (2026)A DarkForums actor is leaking documents described as Russian government internal engineering and technical material dated 2026. While outside the AR-LATAM scope, it signals ongoing theft of state technical documentation and could be relevant for geopolitical CTI. Analysts should monitor for related infrastructure or reused tradecraft reaching regional targets.