BRIEFLeakhighP65
Leak of Morocco's CNOPS national social welfare users database
CNOPS (Morocco National Fund for Social Welfare Organizations)
Detected1 September 2026 · 05:03 UTC
A full users database of CNOPS, Morocco's national social welfare fund, has been leaked on a dark web forum. The data likely includes personal information of millions of beneficiaries and employees. While the victim is outside Latin America, this is a significant government data breach with high fraud potential, though its publication date is unclear.
CategoryLeak
Severityhigh
Priority score65
Detected1 September 2026 · 05:03 UTC
Leak● 44
Conjunto de logs de robo de 966MB publicado el 15-10-2026A 966MB log dump dated 15-10-2026 was posted, likely containing infostealer credentials and session data. Stealer logs frequently include corporate VPN, webmail and SaaS tokens that seed downstream intrusions. Though no named victim is given, its freshness and size make it worth monitoring for regional corporate credentials.Leak● 66
Base de datos del banco brasileño Sicoob (10GB) a la ventaA 10GB database attributed to Sicoob, a major Brazilian cooperative banking group, is being traded on a leak forum. Financial data at this scale exposes account holders and enables fraud and targeted social engineering against customers. It matters for LATAM banking defenders; recency is unclear as the thread appears long-running.Leak● 38
Filtración de 966 MB de registros de documentos con fecha 15/10/2026A 966 MB archive labelled 'Document LOGS' dated 15 October 2026 is being shared on DarkForums, indicating a fresh bulk leak of logs or documents. The affected target is not visible in the accessible text, so the real impact and scale are unclear, but the size and recency suggest a substantial data set that may contain credentials or sensitive documents. Analysts should retrieve the full thread to identify the impacted organizations and any regional relevance.Leak● 48
Filtración de 12,4 GB de datos de GlobalAdmissions.com y China-Admissions.comA 12.4 GB dataset allegedly exfiltrated from GlobalAdmissions.com and China-Admissions.com is being shared, covering international student applicants and admissions data. Although China-focused, the data includes global applicants and can fuel targeted fraud and social engineering. Organisations working with these platforms should assess exposure and watch for re-use.Leak● 68
Filtración de 100.000 registros de sitios web mexicanosA fresh post on the DarkForums leak section is distributing a database of roughly 100,000 records taken from multiple Mexican websites. The data likely contains personal identifiers and credentials of Mexican users, enabling credential stuffing, phishing and fraud against Mexican citizens and businesses. Defenders in the region should hunt for reuse of these credentials against local services and monitor downstream account takeover attempts.Leak● 72
Filtración de datos de la Universidad Kennedy de Argentina (47.000 registros)A DarkForums actor is freely distributing roughly 47,000 records allegedly belonging to Argentina's Universidad Kennedy, posted just minutes ago. The dump appears to expose personal data of students, staff and alumni, enabling phishing, credential stuffing and identity fraud. Argentine universities and their suppliers should treat this as a live exposure and monitor for downstream abuse.