BRIEFLeakhighP65
Saudi Ministry of Health data leak (part 2)
Saudi Ministry of Health
Detected11 September 2026 · 08:12 UTC
A threat actor is publishing a second batch of data allegedly exfiltrated from the Saudi Ministry of Health, a national government health authority. If genuine, it exposes sensitive patient and staff records at scale from a critical public-health body. Government health databases are high-value targets and the multi-part release suggests a substantial ongoing leak.
CategoryLeak
Severityhigh
Priority score65
Detected11 September 2026 · 08:12 UTC
Leak● 55
Filtración de base de datos de United Infrastructure (Reino Unido)A database belonging to United Infrastructure, a UK company, is being advertised on a leak forum. If the firm is tied to infrastructure or construction projects, exposed data could aid further intrusion against operational or partner networks. The scale is unconfirmed, so treat it as a relevant but not yet corroborated business-data leak.Leak● 68
Base de datos de la plataforma cripto WiredBucks (900K usuarios) a la ventaA full database from WiredBucks.com, a crypto investment platform, is being offered, reportedly covering around 900,000 users. This includes identity and account data of crypto customers, who are prime targets for follow-on fraud and account takeover. A leak this size from a financial platform warrants immediate credential-stuffing and phishing warnings for affected users.Leak● 80
Base de datos de la Comisión Federal de Electricidad (México) ofrecida en foroA database attributed to Mexico's state-owned Federal Electricity Commission (CFE) is being circulated for sale on a dark web forum. CFE runs the national power grid, so exposed customer, employee, or operational records could fuel fraud, credential stuffing, and targeted intrusions against energy infrastructure. Defenders in the region should confirm the leak's authenticity and watch for downstream abuse of any credentials it contains.Leak● 47
Teaser de filtración del sistema de tickets de ToobitAn actor is teasing a breach of Toobit's customer support/ticket system, claiming access to internal ticket data. If confirmed, support tickets typically hold user PII, account details and KYC-related correspondence. Crypto-exchange customers then face targeted phishing and account-takeover risk, so defenders should watch for follow-up samples or a full leak.Leak● 28
Venta de bases de datos de la UE y del mundo en foroA seller on BreachForums is advertising generic 'EU and World' databases, with no named organization, sample, or record count. The post is several months old (April 2026) and the scope is undefined, so its relevance to LATAM or critical infrastructure is unconfirmed. Worth cataloguing for context but not an actionable fresh alert.Leak● 20
Filtración de datos de Solmelia CubaData linked to Solmelia's Cuban operations was leaked in June 2023. The dataset centers on the Melia hotel group's Cuban business and, while old, contains customer and personal data that can be reused in social engineering and fraud targeting travelers and staff.