BRIEFLeakhighP55
Database leak of Yehud-Monosson Municipality (Israel)
Municipio de Yehud-Monosson (Israel)
Detected17 September 2026 · 21:12 UTC
A 135 MB database belonging to the Yehud-Monosson municipality in Israel was posted for download on a leak forum. It reportedly contains municipal records, potentially including resident and employee data. Although outside Latin America, municipal breaches like this fuel identity fraud and can expose government credentials useful for downstream attacks.
CategoryLeak
Severityhigh
Priority score55
Detected17 September 2026 · 21:12 UTC
Leak● 40
Volcado de 10 millones de URL:LOG:PASS con credenciales a la ventaA 10-million-line stealer-log set (URL:LOG:PASS) is being distributed, exposing browser-saved credentials together with the sites they belong to. Dumps like this enable credential stuffing against webmail, VPN and admin portals, so any organisation relying on password-only authentication is exposed. Posted in May 2026, it is somewhat stale yet still widely reused by attackers.Leak● 48
Filtración de una base de datos de Instagram con 17 millones de registrosA 17-million-record Instagram database is being circulated as a fresh leak, exposing account identifiers and possibly credentials. Instagram data has leaked repeatedly, so authenticity and freshness are uncertain, but a dump this size can feed credential stuffing and account takeover at scale. Defenders should enforce MFA on any corporate accounts linked to Instagram.Leak● 48
Filtración de datos de Bijak.in con muestra de la aerolínea VolarisA ~308K-record database tied to Bijak.in was shared, including phone numbers, IPs and names, with a free sample referencing Volaris.com. Volaris is a major Mexican airline, so the sample points to a LATAM transport entity being affected. Such contact data enables targeted phishing and SIM-swap fraud against customers and staff.Leak● 62
Venta de base de datos de facturación con 6 millones de registrosA DarkForums seller is offering a billing dataset of roughly 6 million records, posted 15-Sep-2026 and therefore fresh. Billing data typically carries names, addresses and payment details, fueling fraud and account takeover. A set this large also feeds credential-stuffing against the underlying merchants.Leak● 45
Filtración de 56.000 clientes de Energynet SerbiaA database of 56,000+ customers of Serbia's Energynet (HVAC services) was shared on DarkForums, exposing names, contact and address details. Though outside Latin America, it is a concrete company leak useful for phishing and fraud campaigns. Lower regional priority, but it confirms an active seller of real corporate data.Leak● 65
Base de datos robada de Ledger (309.000 registros) a la ventaA listing claims to offer a stolen Ledger database containing 309,000 records dated 2026. Ledger is a major crypto-hardware wallet vendor, and customer-data leaks erode trust and feed targeted phishing and extortion against high-value crypto holders. It is unverified, but given the brand's breach history it merits monitoring.