BRIEFLeakhighP66
Database leak of CONALEP de Morelos institution in Mexico
CONALEP de Morelos
Detected21 September 2026 · 08:37 UTC
A full database of CONALEP de Morelos with 24,000+ records was posted for download, exposing student and staff data from a Mexican public education institution. Leaked academic records enable identity theft, credential abuse and targeted phishing against students and employees. Education entities are frequently used as pivot points into connected government services, so defenders should validate the records and rotate affected credentials.
CategoryLeak
Severityhigh
Priority score66
Detected21 September 2026 · 08:37 UTC
Leak● 78
Datos de alumnos de 19 escuelas primarias de la Secretaría de Educación de México en ventaA DarkNetArmy post by SUB-ZER0 claims data from 19 primary schools under Mexico's Secretaría de Educación, covering minors, and was published today. Records tied to children carry an elevated duty of care: names, school affiliation and guardian contacts are highly sensitive and enable extortion, bullying and identity fraud. Educational authorities in the region should treat this as a serious breach given the vulnerable population involved.Leak● 85
Base de datos de 125.000 contribuyentes del gobierno de Coahuila, México, a la ventaUnder the handle SUB-ZER0, a listing on DarkNetArmy offers a database of roughly 125,000 contributors tied to the Coahuila state government in Mexico, published and bumped today. Taxpayer and contributor records typically include names, identifiers and contact data that enable identity theft and targeted fraud. Because the data is tied to a specific state government, it also provides credible pretext material for phishing campaigns impersonating Mexican tax authorities.Leak● 88
Base de datos del Gobierno de Colombia publicada en DarkForumsA DarkForums user (Krezqatorn) posted what is presented as a Colombian government database on 5 November 2026, suggesting a fresh exfiltration of public-sector records. The exact agency and record count are not disclosed in the listing, which raises the risk that citizen, tax or registry data is being circulated. Any leak of national government data in Colombia exposes citizens to identity fraud and gives attackers material for credential and social-engineering campaigns against public entities.Leak● 50
Base de datos de clientes de Phonehouse España a la ventaA consumer database attributed to the Spanish electronics retailer Phonehouse.es was posted for sale on DarkForums by user WSdatabase as a '2026' dataset. Customer records like these fuel phishing and account-takeover campaigns against Spanish consumers. Phonehouse and Spanish defenders should assess authenticity and notify affected customers.Leak● 55
Venta de datos de ciudadanos argentinos con DNI y correo electrónicoA seller on DarkForums is offering leads of Argentine citizens combining national ID (DNI) numbers with email addresses. DNI is a core identity document in Argentina, making the data valuable for account takeover and social engineering. Organizations serving Argentine users should watch for identity and credential abuse.Leak● 71
Filtración de base de datos del gobierno de São Paulo, Brasil, con 200.000 registrosA 200,000-record database tied to the São Paulo state government (SP.GOV) was published on DarkForums including names, CPF, phone numbers and emails. CPF is Brazil's national taxpayer ID, so the leak raises identity-theft and fraud risk for affected citizens. Brazilian public-sector teams should confirm the exposure and monitor for misuse of the data.