BRIEFLeakcriticalP90
Free leak of 3.6 million Argentine records
Argentina (entidad no especificada)
Detected16 September 2026 · 08:12 UTC
A threat actor is freely distributing a database of roughly 3.6 million Argentine records on DarkForums, posted today. The dataset likely contains personal and contact data of Argentine citizens, enabling phishing, identity fraud and credential stuffing. AR-LATAM defenders should urgently obtain and validate the dump to identify and notify affected parties.
CategoryLeak
Severitycritical
Priority score90
Detected16 September 2026 · 08:12 UTC
Leak● 45
Base de datos de Notion con 110 millones de registros a la ventaA seller is offering a 110-million-record Notion workspace database, posted in June 2026. Such data often includes corporate notes, embedded credentials and project details valuable for follow-on intrusion. Organizations using Notion should audit for exposed secrets and monitor for credential reuse.Leak● 52
Volcado de datos de 13 millones de ciudadanos de CanadáA 13 million-record dump of Canadian citizen data is circulating in underground forums. Identity data of this scale fuels identity theft, benefits fraud and account takeover across the population. Although outside AR-LATAM, it is a landmark government-scale leak that CTI teams should track for reused data and linked campaigns.Leak● 62
Base de datos de CenterPoint Energy (Texas) con 3 millones de filasA 3,093,459-row database attributed to CenterPoint Energy, a major Texas electric and gas utility, is being offered on BreachForums. Utility customer and operational data can enable billing fraud and reconnaissance for attacks on critical energy infrastructure. Energy-sector defenders should verify the exposure and warn affected customers.Leak● 45
Filtración de base de datos de la Escuela Nacional de Seguridad de FranciaA database tied to ecolenationalesecurite.fr, a French security education institution, has been leaked for free on a hacking forum. Free public release lowers the barrier to abuse and may expose sensitive staff, student, or affiliated personal data. It matters for defenders tracking exposure of government and defense-adjacent organizations.Leak● 78
Base de datos de ciudadanos de Brasil a la ventaA threat actor is selling a database of Brazilian citizens' records, posted just minutes before collection on a dark web marketplace. The scale and personal nature of citizen data make it valuable for identity theft, fraud, and targeted phishing against Brazilian residents. Defenders in Brazil should watch for credential-stuffing and social-engineering campaigns reusing this data.Leak● 40
Publicación de datos OSINT de España en foro de filtracionesA freshly posted 'osint spain' thread in a leak forum appears to share OSINT or leaked data on Spanish individuals or entities. Spain is a Spanish-speaking region in scope, and fresh doxx/OSINT dumps can feed targeting, fraud or extortion. Impact looks limited so far but it is region-relevant and warrants monitoring.