BRIEFLeakhighP74
Carhartt database leak (91 million records)
Carhartt
Detected17 October 2026 · 19:26 UTC
A full 91-million-record dump reportedly from US apparel retailer Carhartt is being advertised on DarkForums. The scale suggests customer accounts, emails, and possibly order and payment metadata, which would enable large-scale phishing and credential-stuffing. For defenders it is a major fresh consumer-data breach of a well-known brand.
CategoryLeak
Severityhigh
Priority score74
Detected17 October 2026 · 19:26 UTC
Leak● 38
Redistribución de la base de datos de CAF.fr (22,4 millones)A 22.4 million-record dataset linked to CAF.fr, France's family-allowance agency, is being reshared via BreachForums. Although the underlying breach is well known and dated 2025, redistribution keeps sensitive social-security data in circulation for reuse in fraud and phishing. It is low priority as a fresh alert but relevant for monitoring data reuse.Leak● 72
Filtración de 6,5 GB de la base de datos del Bank of Saint LuciaA 6.5 GB database attributed to the Bank of Saint Lucia, a state-linked Caribbean bank, was posted on BreachForums today. The dump could include customer accounts, KYC data, and internal records, exposing clients to fraud and the bank to regulatory and reputational damage. Such data also fuels credential-stuffing and targeted phishing against financial-sector users.Leak● 42
Filtración parcial de datos del Ministerio de Salud de Chipre del NorteA partial database attributed to the Northern Cyprus Ministry of Health is being circulated under the REICHLeaks banner. As a government health dataset it can contain patient and staff PII useful for targeted phishing, though the partial scope and the entity's small size limit its overall impact. It matters mainly as corroboration of ongoing leaks against regional government health bodies, not as a Latin American alert.Leak● 45
Base de datos de clientes financieros de Taiwán a la ventaA seller claims to offer a 'Taiwanese financial customer database' dated 2026, presumably containing PII of customers from one or more financial institutions. The exact institution and record count are unconfirmed, but financial-sector data fuels fraud and account-takeover. Relevant if your monitoring overlaps Asian finance customers, though outside the primary AR-LATAM focus.Leak● 80
Base de datos del municipio de Caldera, Chile, a la ventaA seller is advertising a database belonging to the Municipality of Caldera in Chile's Atacama Region. Municipal data typically holds citizen PII, staff records and internal contacts useful for targeted phishing, invoice fraud and account takeover. A fresh public-sector leak in Latin America warrants immediate verification and notification to the entity.Leak● 58
Documento interno de la constelación Starshield de SpaceX filtradoAn internal SpaceX document describing the Starshield Constellation Technical Baseline and Architecture Description is circulating on a carding forum. Starshield is SpaceX's defense and military satellite line, so this leak can expose system architecture and security-relevant engineering detail valuable to adversaries. Aerospace and defense defenders should treat it as sensitive and assess linked personnel and credential exposure.