BRIEFLeakhighP50
Pakistan NADRA national identity database leak (900 GB)
NADRA (Pakistán)
Detected19 September 2026 · 13:12 UTC
A 900 GB leak of Pakistan's NADRA national identity database, reportedly containing full citizen identity records, is being distributed. NADRA is a government authority, so this is a major state-level compromise whose data fuels identity fraud and credential abuse, worth tracking even outside Latin America.
CategoryLeak
Severityhigh
Priority score50
Detected19 September 2026 · 13:12 UTC
Leak● 78
Base de datos del Gobierno de Brasil a la venta en BreachForumsA BreachForums thread advertises a database attributed to the Brazilian government, posted by actors using the handles MortemTeam, Narcos515 and KonataizumiLeaks. The exact record count and the specific agency are not visible, but leaks tied to federal or state entities in Brazil give attackers identity data, credentials and internal contacts useful for phishing and account takeover. Brazilian public-sector defenders should treat this as a possible exposure of citizen or employee data.Leak● 58
Base de datos de 31 millones de ciudadanos de Israel ofrecida en DarkForumsA user named Torramyr posted on DarkForums a dataset claiming 31.10 million records of Israeli citizens dated late October 2026. National citizen records typically combine identifiers, contact data and possibly more, enabling mass fraud and targeted attacks. Although outside Latin America, the scale makes it relevant for defenders tracking bulk identity exposure.Leak● 64
Filtración de 9 millones de registros KYC de BeatStarsA threat actor named Plaguinator is advertising a breach of BeatStars on DarkForums claiming 9 million KYC records. KYC datasets typically contain identity documents, addresses and financial details, making them high-value for fraud and account takeover. It matters for defenders monitoring identity-theft risk and for verifying whether real customer data is included.Leak● 88
Filtración de 5 millones de registros de Función Pública de Colombia (SIGEP)Actors on DarkForums are distributing an extracted database tied to Colombia's Función Pública (SIGEP), releasing 1 million records for free out of an alleged 5 million total. SIGEP holds public-employment and civil-service data, so exposure could reveal government employees' identities and account details. This matters for Colombian public-sector defenders assessing credential reuse and phishing against officials.Leak● 42
Publicación de una compilación de documentos no clasificados de la OTAN (2009-2024)A RaidForums thread, readable only after login, advertises a bulk compilation of NATO unclassified documents spanning 2009 to 2024. Because the material is unclassified, the impact is mainly aggregation and open-source exposure rather than disclosure of secrets. Analysts should verify authenticity and provenance before assigning any significance.Leak● 44
Base de datos con 363.752 perfiles personales de Nueva Jersey a la ventaA DarkForums seller offers 51,000 records that include credit card data plus 363,752 full personal profiles of New Jersey residents without card data. The combination of identity and payment information supports card-not-present fraud, account takeover and synthetic identity creation at scale. The volume suggests a consolidated regional breach rather than a small combolist.