BRIEFLeakhighP65
Leak exposes 70,000 Moroccan intelligence agents (DGST)
DGST (Marruecos)
Detected13 September 2026 · 01:12 UTC
A leak dubbed 'Jabaroot' exposes roughly 70,000 personnel of Morocco's Directorate General for Territorial Surveillance (DGST), including identities and contact data. It is a serious counter-intelligence breach against a foreign state service, published around 24 Aug 2026 and still circulating. Though outside Latin America, it is a high-value state dataset that enables targeting and should be tracked.
CategoryLeak
Severityhigh
Priority score65
Detected13 September 2026 · 01:12 UTC
Leak● 40
Filtración de datos de la aseguradora AXA Colpatria (Colombia)A RaidForums mirror thread advertises a downloadable database from AXA Colpatria, one of Colombia's largest insurers, exposing customer and policy data of a regulated financial entity. The thread carries no clear recent date and RaidForums mirrors usually re-post archival material, so this is likely a re-circulation of an older breach rather than a fresh incident. It still matters for Colombian banking/insurance supervisors and for fraud teams monitoring misuse of policyholder records.Leak● 52
Base de datos de entidades gubernamentales sin identificar publicada en foroA BreachForums user ('haven') published a dump titled 'Random Govs' on 28 October 2026, apparently containing records tied to government entities, without naming the specific agencies or the country. The scale and provenance are unverified, but any government-oriented dataset warrants triage because the same records often feed credential-stuffing and social-engineering campaigns against public-sector staff. Because the region is unspecified, it cannot be ruled out that Latin American government accounts are included.Leak● 52
Filtración de base de datos del Partido dos Trabalhadores en Belém, ParáA BreachForums user 'bl33dr00t' posted a DATABASE leak tied to the Workers' Party (PT) branch in Belém, Pará, Brazil. Political party member and contact records are sensitive in the LATAM context and could enable phishing, doxxing or influence operations against party staff. The exact date and record count are not stated, so the freshness and scale should be confirmed before escalation.Leak● 84
Filtración de bases de datos del DNRPA, GDE y PAMI de ArgentinaA forum user 'cyk' posted a DATABASE leak on Spear Leaks covering three Argentine state entities: the national vehicle registry (DNRPA), the government document-management platform (GDE) and the pensioners' health system (PAMI). These are core public-sector systems holding citizen identity, vehicle and health data, so a consolidated dump would be a serious exposure of Argentine government records. The post dates to 2026-07-26, so it is not brand-new but remains highly relevant for defenders.Leak● 58
Presunta filtración de base de datos de Swiss MedicalA forum thread advertises a database labeled 'CH MedReg Swiss Medical', pointing to a possible breach of patient, member or claims data at Swiss Medical, a major Argentine private health provider. The listing sits behind a login wall, so record count and date are unverified, but healthcare data carries high regulatory, fraud and extortion risk. Health-sector defenders should treat this as a potential exposure of sensitive medical records pending confirmation.Leak● 44
Filtración de la base de datos del sitio griego daskaloi.grThreat actor DBHunter published a database attributed to the Greek site daskaloi.gr on the DarkNetArmy forum minutes ago; the record count and fields are not visible in the thread preview, so scale is unconfirmed. Fresh regional database drops of this kind are typically resold and reused for credential stuffing within days, so Greek organizations and the site's user base should verify exposure.