BRIEFLeakhighP54
Database leak of Colombian company sosltda.com
sosltda.com
Detected17 September 2026 · 00:12 UTC
A database belonging to the Colombian firm sosltda.com is being distributed on a dark web forum as a 2026 leak. It exposes the organization's internal/customer records to anyone who downloads it, enabling fraud and targeted attacks. Colombian and regional defenders should verify scope and notify affected parties.
CategoryLeak
Severityhigh
Priority score54
Detected17 September 2026 · 00:12 UTC
Leak● 32
Base de datos de una repartidora marroquí con 500.000 registrosA full database belonging to a large Moroccan delivery company, roughly 500,000 records, was posted for sale on DarkNetArmy. It is a mid-sized corporate leak outside the AR-LATAM region, more relevant to the affected company than to regional defenders. It is notable only as another logistics-sector data exposure.Leak● 38
Volcado de 40 millones de credenciales URL:LOGIN:PASSWORDA private 40 million line URL:LOGIN:PASSWORD stealer log was published on 16/09/2026, indicating freshly harvested infostealer credentials. It is a generic aggregated dump without a named victim, so its direct relevance to AR-LATAM is limited. It still matters as a source of valid credentials that may enable account takeover if re-used broadly.Leak● 44
Base de datos con 53 millones de correos de EE. UU. publicadaA fresh dump labelled 'USA 2026 53 MILLIONS EMAILS' was posted moments ago, offering tens of millions of US email addresses. Even without passwords, such volume supports mass phishing, credential-stuffing and BEC campaigns against downstream targets. Defenders should anticipate an uptick in email-based attacks referencing these addresses.Leak● 55
Filtración de base de datos de 602 millones de ciudadanos paquistaníesA threat actor is circulating what is claimed to be a 602 million record database of Pakistani citizens on DarkForums, a nation-scale exposure of identity data. Although outside the AR-LATAM region, the sheer scale makes it a major PII and credential source that could be reused for fraud and targeting worldwide. Defenders should watch for re-use of these records against regional accounts and services.Leak● 42
Base de datos de juandediego.es (España, 80K registros con CIF/NIF e IBAN) a la ventaA database of roughly 80,000 records from the Spanish site juandediego.es is for sale, including CIF/NIF tax identifiers and IBAN bank lines. Combining tax identity with banking data facilitates invoice fraud and direct-debit abuse. Smaller in scope than other listings, so it ranks lower but is still worth tracking.Leak● 62
Base de datos de tellmebye.com (España, 1,5M líneas con IBAN, DNI y teléfono) a la ventaA seller is offering a 1.5 million-line database from the Spanish service tellmebye.com containing IBAN, date of birth, DNI and phone numbers. This is high-grade PII plus banking data that directly enables fraud, phishing and account takeover. Spanish-speaking banks and customers should monitor for downstream abuse even though the entity is in Spain, not LatAm.