BRIEFLeaklowP52
Document leak from investment bank Goldman Sachs
Goldman Sachs
Detected7 October 2026 · 21:07 UTC
A DarkForums thread advertises leaked documents tied to Goldman Sachs, a top-tier US investment bank. If authentic, the dump could expose employee or client data usable for fraud, phishing and business email compromise. Defenders should verify scope and watch for credential reuse against the bank and its partners.
CategoryLeak
Severitylow
Priority score52
Detected7 October 2026 · 21:07 UTC
Leak● 44
Filtración de identidades de 120.000 residentes de CirebonA threat actor is publishing a database reportedly containing the personal identities of roughly 120,000 residents of Cirebon, Indonesia, likely sourced from a local government population registry. The scale and citizen-PII nature make it useful for identity theft and downstream fraud. It matters to defenders outside the region only as a signal of an exposed civic data source, not as a direct AR-LATAM target.Leak● 45
Base de datos con 3 millones de PII de la financiera india EmergencyPaisa a la ventaA seller on the Spear forum is offering a 3-million-record PII database from EmergencyPaisa, an Indian consumer-finance website. The data likely includes names, contact details and financial identifiers that enable fraud and targeted phishing. Even outside our region, it shows mid-size fintechs remain prime leak targets.Leak● 25
Filtración de base de datos de la brasileña Grupo FortaA database tied to grupoforta.com.br, a Brazilian company, was posted for download on DarkForums, potentially exposing customer or internal records. Brazilian corporate breaches are relevant to LATAM defenders because leaked identities often resurface in regional fraud. The post dates to late 2023, so it is old and should be treated as background, not a fresh incident.Leak● 28
Filtración de base de datos de Opendatacenter.com.brA leaked database from Opendatacenter.com.br, a Brazilian hosting/data-center provider, was shared on DarkForums. As a hosting/infrastructure supplier, exposed customer and access data could cascade to many downstream organizations. However the post is dated 2023, so it is stale context rather than a fresh alert.Leak● 44
Base de datos de empresas de Emiratos Árabes Unidos a la ventaA seller posted a fresh offer of UAE business-related data on DarkForums, promising commercial and company records for sale. Corporate datasets like this enable BEC, phishing and supply-chain fraud against firms and their partners. It is recent and monetized, so it is worth watching for indicators of the same source hitting LATAM-linked entities.Leak● 50
Filtración de la base de datos del Ministerio del Interior de IrakA database belonging to the Iraqi Ministry of Interior, a national law-enforcement/government body, is being shared on BreachForums. Government identity and personnel data of this kind can fuel impersonation, targeting of officials and cross-border intelligence use. Though outside LATAM, it is a genuine state-entity breach worth tracking for regional spillover and actor profiling.