BRIEFLeaklowP25
Malaysia JPJ transport department database leak
jpj.gov.my (Departamento de Transporte por Carretera de Malasia)
Detected14 September 2026 · 16:12 UTC
Reposts collapsed2
A database allegedly tied to Malaysia's Road Transport Department (jpj.gov.my) is circulating on BreachForums, a genuine government source. However, the post dates to November 2024 and is a repost, and the victim is outside Latin America, so it carries little current alerting value.
CategoryLeak
Severitylow
Priority score25
Detected14 September 2026 · 16:12 UTC
Leak● 32
Filtración de 1M de registros de un salón de belleza de CanadáA 1M-record database belonging to a Canadian beauty salon is being shared free on BreachForums, likely containing customer PII and credentials. The volume is large enough to feed credential-stuffing and phishing campaigns, though the victim is a small private business outside the LATAM region.Leak● 72
Filtración de base de datos de la Universidad Corporativa FP PerúA database of about 1M user records from Universidad Corporativa FP Peru has been posted for download on DarkForums, exposing student and staff identities. As a Latin American education target, the leaked credentials and personal data can fuel phishing, account takeover and credential stuffing against related regional institutions.Leak● 38
Filtración de pasaportes y documentos de identidad de EAU (3,5 GB)A 3.5 GB archive of UAE passports and national ID documents is being traded, exposing sensitive identity data usable for fraud and account takeover. The thread sits at page 29, indicating it has circulated for a long time rather than being fresh. Impact is real but outside the AR-LATAM region.Leak● 48
Filtración de 1,49M de registros de empresas estatales indiasA dataset with roughly 1.49 million records tied to India's Central Public Sector Enterprises (CPSE) is being circulated on DarkForums. It reportedly includes employee and contact details of state-owned companies. Such government-linked data fuels phishing, impersonation and credential-stuffing campaigns against public-sector and supplier targets.Leak● 52
Venta de base de datos de 49M de contactos de apollo.ioA seller is offering a 49 million-record apollo.io B2B contact database dated 2026 on a Russian-language forum. It reportedly contains corporate emails, names, job titles and company details from a widely used sales-intelligence platform. Defenders should anticipate elevated business-email-compromise, credential stuffing and targeted phishing leveraging accurate org-chart data.Leak● 46
Filtracion masiva de NBXSoluciones Mexico: 7M usuarios VoIPA database attributed to Mexico's NBXSoluciones VOIP provider, over 7 million user records, has been published. It affects telecom customers with contact and call-related data. Although dated 2025 and therefore not fresh, it remains a large LATAM telecom exposure worth tracking for subscriber and credential risk.