BRIEFLeakhighP80
Database leak of Argentine credit data firm Nosis
Nosis
Detected10 November 2026 · 19:43 UTC
A BreachForums actor is offering what is described as Nosis 'Informe 2.0' official business and credit database, from a major Argentine risk and credit-reporting provider widely used across banking and commerce. Such records enable identity fraud and targeted B2B fraud against Argentine firms. Leaked credit and business data is highly sensitive for the country's financial sector.
CategoryLeak
Severityhigh
Priority score80
Detected10 November 2026 · 19:43 UTC
LeakPriority 40
Filtración de 7,7 millones de cuentas de Armor GamesA forum post offers roughly 7.7 million email:password lines attributed to Armor Games in plaintext. It is a large volume of credentials but for a gaming site, likely a repost of previously known data. Useful for credential-reuse awareness but not tied to government or critical infrastructure.LeakPriority 55
Base de datos de la empresa de seguridad ADT filtradaA BreachForums thread advertises a database leak attributed to ADT, Inc. (adt.com), a major home and business security provider. Exposure of customer and account data from a physical-security firm is sensitive and can enable account takeover and social-engineering of monitored clients. It is a real named organization, though outside the LATAM focus.LeakPriority 73
Base de datos del banco brasileño Sicoob (10 GB) a la ventaAn underground thread advertises a 10 GB database attributed to Sicoob, one of Brazil's largest credit-union and banking cooperatives, on xReactor. A leak of this size from a financial institution risks exposing member and account data that fuels fraud and account takeover. Banking data is core critical infrastructure for the region.LeakPriority 82
Base de datos de la entidad financiera Sagrario de EcuadorA threat actor posting as 'Pheisito' published a database belonging to Sagrario, a financial entity in Ecuador, on the DarkForums leak section. A leaked financial-sector database can expose customer PII, account details and internal records, fueling fraud, account takeover and targeted phishing against clients. Because it involves an Ecuadorian banking institution and appears freshly posted, it warrants immediate verification.LeakPriority 48
Filtración de datos de clientes de 268 hoteles en FranciaA client file covering 268 hotels in France was posted for download on DarkForums on November 10, exposing guest records and contact data. Such hospitality datasets are valuable for phishing, payment fraud and targeted attacks on travelers and corporate accounts. Because the post is fresh, the affected hotels should assess the exposed data and notify customers under GDPR.LeakPriority 40
Filtración de la base de datos de 7,7 millones de ArmorGamesA plaintext email:password dump of 7.7 million lines attributed to gaming platform ArmorGames is circulating on the Niflheim forum. Since the credentials are exposed in clear text, they enable immediate credential-stuffing and account takeover against affected users. The thread appears to be a repost of an older breach, so it is partially stale but still actionable for password-reuse risk.