BRIEFLeaklowP28
Okx.com virtual machine image leaked on an underground forum
OKX
Detected21 September 2026 · 19:37 UTC
A leaked virtual-machine image tied to OKX, a major crypto exchange, was posted in early January 2026. If genuine, VM access can expose credentials, API keys and internal configuration enabling fund theft or lateral movement. It is now roughly eight months old, so it is background context rather than a fresh alert.
CategoryLeak
Severitylow
Priority score28
Detected21 September 2026 · 19:37 UTC
LeakPriority 45
Filtración de datos del cuerpo policial Brimob de IndonesiaA DarkForums thread advertises a downloadable data breach of Korps Brimob, Indonesia's national police mobile brigade, a sensitive government law-enforcement unit. The listing offers the leaked files for direct download, though the record count and fields are not stated in the available text. Such a leak of police personnel or operational data poses risks of targeted attacks and identity abuse against officers.LeakPriority 62
Base de datos de Ecuador publicada en DarkForumsThe user Pheisito posted a thread labeled 'DATABASE ECUADOR CONTRA PT' on DarkForums on 6 November 2026, releasing an Ecuadorian database. The exact entity and record count are not disclosed, but the naming points to Ecuadorian data, possibly tied to a public or government-adjacent body. Ecuadorian organizations should verify whether their records appear in this dump and watch for downstream credential abuse.LeakPriority 44
Venta de base de datos inmobiliaria de California con 1,9 millones de registrosA BreachForums seller is advertising a dataset of roughly 1.9 million California real estate records, likely a compiled list of property owners and related contact data. While not tied to a single named company, records of this type expose homeowners to targeted phishing, mortgage and title fraud, and solicitation scams. Defenders in US real estate and title insurance should treat it as available material rather than a confirmed breach.LeakPriority 80
Base de datos de ciudadanos y policía de Tlaquepaque a la ventaA BreachForums actor posted what is presented as a complete database of the municipality of Tlaquepaque, Jalisco, combining citizen records with police personnel data. If authentic, it exposes resident identifiers and contact details alongside law-enforcement identities, enabling identity fraud, doxxing and targeted attacks against local officials. Mexican municipal leaks of this scale typically get reused for extortion, SIM-swap and impersonation campaigns against citizens and officers alike.LeakPriority 58
Base de datos de Colombia a la venta en DarkForumsOn 5 November 2026, user M1y4ku posted 'DB colombia-OFB' in DarkForums' Databases section, advertising a Colombian database. The entity behind the data is not named, but any freshly presented Colombian dataset can contain citizen or organizational records relevant to national defenders. Analysts should obtain a sample to identify the affected organization and scale before it circulates further.LeakPriority 72
Filtración FortiBleed 2026 expone credenciales de FortinetA database leak labeled FortiBleed 2026 was published on DarkForums' Databases section on 5 November 2026 by user Roxym3ln. The naming strongly suggests exposure of Fortinet/FortiGate VPN credentials and configuration data, which are widely deployed to protect government, military and critical-infrastructure networks across Latin America. Leaked VPN credentials are a direct initial-access vector for perimeter compromise.