BRIEFLeakhighP74
Patient photos and full names leaked from San Juan Andes Health
San Juan Andes Health
Detected30 September 2026 · 03:17 UTC
A threat actor is publishing patient photos alongside the full names of individuals identified as patients of San Juan Andes Health, exposing highly sensitive medical PII/PHI. The leak enables targeted fraud, extortion and doxxing of patients, and points to a probable breach of a regional healthcare provider in the Andes/San Juan area. Health entities are critical infrastructure, so the affected organisation should urgently verify exposure, contain the source and notify regulators.
CategoryLeak
Severityhigh
Priority score74
Detected30 September 2026 · 03:17 UTC
LeakPriority 56
Filtración de 4,5 GB de datos internos de BP BioenergyA DarkForums user (Hannibal_Lecter) posted in early November 2026 an alleged hack and dump of roughly 4.5 GB of extracted data from BP Bioenergy. The target fits the energy/bioenergy sector, which has operational and third-party exposure. Volume and sector make it worth validating for internal documents, credentials and supply-chain details.LeakPriority 62
Filtración de información del rectorado del ITLA, República DominicanaA DarkForums thread advertises a database described as information from the rector's office of ITLA, a Dominican Republic public technology institute. The exposure centers on institutional/administrative data of a government-backed education entity. Such leaks aid phishing of staff and students and reveal internal structure of a public institution.LeakPriority 72
Filtración de la base de datos de la fintech hondureña TodoPagoA DarkForums user (hassen) posted a database belonging to todopago.hn, a Honduran online payments platform, on 14 November 2026. The .hn domain ties the victim to Honduras and to the local financial/payments sector, which handles transaction and customer KYC data. A leak of a payment provider is high impact for fraud, account takeover and downstream merchant exposure.LeakPriority 38
Base de datos de 31 GB del sitio de apuestas Cenabet filtradaA 31 GB database reportedly belonging to the Cenabet online betting brand was shared in a hacking forum's fresh-leaks section. The volume suggests a large customer and account dataset, though the leak dates to June 2026 and is not freshly published. It is relevant for credential and PII exposure tied to gambling accounts.LeakPriority 45
Base de datos de la española OVP Software filtrada en DarkForumsA database belonging to the Spanish software vendor ovpsoftware.es was posted in the DarkForums leak section by user V0idix. The thread dates to July 2026 and the record count is not disclosed, so exposure should be assessed. Spanish-speaking organizations and customers of OVP Software should monitor for leaked data.LeakPriority 50
Filtración de datos de empleados de Amerijet International AirlinesAn employee directory dump from Amerijet International Airlines, apparently extracted from Azure, was posted on multiple leak forums including PwsForums and RaidForums. It contains 3,400+ records with names, corporate emails, job titles and phone numbers. The directory data enables targeted phishing and business email compromise against a US cargo airline.