BRIEFLeaklowP20
State Bank of India data leak (2023)
State Bank of India
Detected2 September 2026 · 04:03 UTC
This is a legacy leak from the State Bank of India posted in 2023. While the bank is a major financial institution, the data is stale and no longer constitutes a fresh alert. Still, it may resurface in credential stuffing lists.
CategoryLeak
Severitylow
Priority score20
Detected2 September 2026 · 04:03 UTC
Leak● 40
Filtración inicial de datos de PG Group (Pure Options)The same actor published a first publication batch of samples attributed to PG Group (Pure Options), a US cannabis retail operator. These staged drops typically escalate to a full database release including customer, employee and order data if the target ignores the demand. Impact is limited to a single commercial victim outside the region, but it signals an active extortion campaign worth tracking for tactics and infrastructure.Leak● 42
Filtración inicial de datos de Precision FacadesA leak actor published a first batch of samples attributed to Precision Facades, apparently a construction/facade contractor, as part of a staged extortion release. Named-victim sample drops usually precede a full data dump if the victim does not engage. The volume and sensitivity are unconfirmed, so treat it as an emerging leak to verify rather than a confirmed large breach.Leak● 55
Dediserve: publicación inicial de datos filtradosA leak actor released a first publication batch of sample data attributed to Dediserve, an Irish cloud hosting and IaaS provider. If the samples are genuine, customer records, billing data and hosted-client credentials could be exposed, with downstream risk for every organisation running infrastructure on that provider. Defenders should check the samples for their own credentials and watch for follow-on extortion or access sales.Leak● 44
Filtración de 1,67 millones de credenciales de EspañaA 1.67 million-line combolist tagged to Spain (Europa ES) was published on 16 October, aggregating email/password pairs likely from stealer logs and breaches. It is not tied to a single named organization, so the risk is credential reuse across Spanish businesses and public-sector accounts. Monitoring for valid corporate logins and enforcing MFA are the practical defenses.Leak● 50
Datos de más de 750 empresas turcas a la venta o filtradosA seller is offering or leaking data attributed to more than 750 top Turkish companies on a leak forum, posted around 17 September 2026. The scope spans hundreds of organizations rather than a single victim, suggesting aggregated corporate contact and credential data useful for phishing and business email compromise. Though outside Latin America, it can seed cross-border fraud targeting regional partners.Leak● 52
Combolist de 205.000 credenciales argentinas a la ventaA 205,000-line Argentina-focused credential combolist was posted minutes ago on a leak forum, likely built from infostealer logs and prior breaches. Rather than one victim database, it lists individual email/password pairs, so exposure is dispersed across consumers and corporate accounts that reuse passwords. Argentine defenders should search SSO and mail gateways for matches and force resets where reuse exists.