BRIEFGov / MilitarycriticalP90
San Luis Potosí state government database leak
Gobierno del Estado de San Luis Potosí (sanluispotosi.gob.mx)
Detected7 October 2026 · 16:07 UTC
An actor posted a database tied to sanluispotosi.gob.mx, the official portal of the Mexican state of San Luis Potosí, and the thread is only minutes old. Government portals typically aggregate citizen records, contracts and staff contacts, so a dump can expose PII and enable phishing or lateral access against public administration. Mexican state defenders should treat this as a fresh incident and confirm scope and access.
CategoryGov / Military
Severitycritical
Priority score90
Detected7 October 2026 · 16:07 UTC
Gov / Military● 92
Base de datos del Gobierno de Tucumán filtrada: 90K registrosA 90,000-record database attributed to the Tucumán provincial government (tucuman.gob.ar) was posted for download on a cybercrime forum, with the thread appearing only minutes before collection. Leaked citizen and public-sector records enable identity theft, targeted phishing and credential stuffing against provincial services. Argentine public bodies should confirm the exposure, rotate credentials and watch for downstream fraud.Gov / Military● 56
Fuga de datos SCADA de una planta de agua en IndonesiaA collection of SCADA data from a water treatment plant (WTP) in Indonesia is posted on BreachForums. OT/SCADA exposure in critical infrastructure can reveal network layouts, credentials and control endpoints. Water utilities are high-impact targets, and this material can seed disruptive or destructive attacks.Gov / Military● 85
Base de datos del Gobierno de Jalisco (jalisco.gob.mx) a la ventaAn actor just posted a purported database of the official Jalisco state government domain (Mexico) on DarkForums. Compromise of a state government portal can expose citizen records and internal credentials and act as a pivot into other public systems. High priority for Latin American critical-infrastructure defenders to verify and contain.Gov / Military● 58
Cancillería del Gobierno de Ecuador a la venta en BreachForumsA BreachForums marketplace listing names the Chancellery of the Government of Ecuador, indicating a possible leak or sale of data/access tied to a Latin American state body. If genuine, exposed records or credentials could enable intrusion into official channels and impersonation of government officials. Defenders should verify the claim and hunt for credential reuse against Ecuadorian government systems.Gov / Military● 48
Filtración de 100GB de la base de datos gubernamental rss.gov.iqAn actor is circulating a 100GB dump attributed to the Iraqi government site rss.gov.iq. A leak of this scale from a state portal means mass exposure of citizen records and internal data useful for identity fraud and state-targeted intelligence. It is outside AR-LatAm, but a large fresh government-data leak is worth tracking for TTP and victim-notification context.Gov / Military● 62
Volcado de base de datos del Gobierno de Nepal con acceso de administradorAn actor claims a full database dump, admin access, and compromise of a Nepal government entity plus a tech company. Government databases typically hold citizen PII, credentials, and internal systems, making this a serious breach even outside Latin America. The post signals an actor with live post-exploitation access whose TTPs are worth tracking.