PULSE
ES
FEED
ransombarracuda reclama a EVINOKS · TR · Technologyransomqilin reclama a Danser · US · Otherransomvexy ransomware reclama a System Soft · BG · Technologyransomvexy ransomware reclama a JHAMF Group · BDransomemperador reclama a Punta Shopping · BR · Retail & E-Commerceransomnightspire reclama a **F*A *.Aransompayload reclama a Straze Garden Center · Retail & E-Commerceransompayload reclama a Kraft Lernen · DE · Educationransompayload reclama a SALEG (Sachsen-Anhaltische Landesentwicklungsgesellschaft mbH) · DE · Government & Defenseransomrhysida reclama a Phoenix Charter Academy · US · Educationransomauditteam reclama a Pe***CT · NLransomauditteam reclama a jl***om · SGransomauditteam reclama a hn***rgransomauditteam reclama a ro***upransombarracuda reclama a EVINOKS · TR · Technologyransomqilin reclama a Danser · US · Otherransomvexy ransomware reclama a System Soft · BG · Technologyransomvexy ransomware reclama a JHAMF Group · BDransomemperador reclama a Punta Shopping · BR · Retail & E-Commerceransomnightspire reclama a **F*A *.Aransompayload reclama a Straze Garden Center · Retail & E-Commerceransompayload reclama a Kraft Lernen · DE · Educationransompayload reclama a SALEG (Sachsen-Anhaltische Landesentwicklungsgesellschaft mbH) · DE · Government & Defenseransomrhysida reclama a Phoenix Charter Academy · US · Educationransomauditteam reclama a Pe***CT · NLransomauditteam reclama a jl***om · SGransomauditteam reclama a hn***rgransomauditteam reclama a ro***up
Kalir Brief · Item17 September 2026 · 00:12 UTC
BRIEFLeakhighP54

Database leak of Colombian company sosltda.com

sosltda.com

Detected17 September 2026 · 00:12 UTC
Why it matters

A database belonging to the Colombian firm sosltda.com is being distributed on a dark web forum as a 2026 leak. It exposes the organization's internal/customer records to anyone who downloads it, enabling fraud and targeted attacks. Colombian and regional defenders should verify scope and notify affected parties.

MetadataRECORD
CategoryLeak
Severityhigh
Priority score54
Detected17 September 2026 · 00:12 UTC
Related items6
Leak● 48
Base de datos de la inmobiliaria malasia Mah Sing Group a la ventaThreat actor 'scarlettgroup' posted a database allegedly belonging to Mah Sing Group Berhad, a listed Malaysian property developer (mahsing.com.my), on DarkForums and BreachForums mirrors. Scope and record count are not visible, but corporate data from a listed developer typically includes customer, buyer and contact records. Such leaks fuel targeted phishing against property buyers and enable business email compromise against the firm's partners.
38m
Leak● 62
Base de datos del diario uruguayo la diaria a la ventaA cybercriminal thread on an onion forum advertises a database belonging to la diaria, a Uruguayan independent newspaper (ladiaria.com.uy). The thread is login-walled so the record count and price are unknown, but a media outlet in the region is a plausible target for subscriber and staff credential exposure. Leaked newsroom or subscriber data enables phishing against journalists and can be reused for account takeover.
38m
Leak● 30
Publicada una brecha de sitios .gov.ma (Marruecos)The actor 'fexus' posted a thread on BreachForums titled '.gov.ma websites breach', indicating data from Moroccan government sites. However, the post is dated mid-May 2026, roughly six months before today, so it is not a fresh alert and the specifics of the leak are not detailed in the captured text. It is a government-sector exposure but outside the Argentina/LatAm focus and already stale.
2h
Leak● 45
Filtración de 200.000 credenciales corporativas de Alemania (D4RKNETHUB)The D4RKNETHUB actor is distributing 'Part (6)' of a dataset containing roughly 200,000 German corporate email:password records, reposted across several forums including DarkNetArmy, Niflheim and HARD-TM. These mail:pass combos are directly usable for credential stuffing, account takeover and business email compromise against German companies. Fresh corporate credential sets like this are actively exploited for phishing and unauthorized access.
2h
Leak● 48
Filtración de 37.500 registros de pago de PayXpress (Israel)A BreachForums thread offers for download roughly 37,500 digital payment records (~7GB) attributed to the Israeli payment firm PayXpress. The data reportedly includes payment/transaction details, creating fraud and identity-theft risk for customers. Payment-processor leaks like this also enable downstream card and account fraud.
2h
Leak● 55
Presunta filtración de datos del gobierno de Coahuila (gob.mx)A BreachForums user (LulzSkid) posted what they claim is data taken from a Coahuila state government page on gob.mx, published in early November 2026. The scope is described vaguely ('random shi'), so the scale and sensitivity are unconfirmed, but any exposure from a Mexican state government portal is worth reviewing. This is the only fresh Latin American government-related item in the batch and should be validated quickly.
2h