BRIEFLeakhighP71
HATICA breach exposes data from JPMorgan, BrowserStack and GE Healthcare
HATICA (JPMorgan, BrowserStack, GE Healthcare)
Detected20 September 2026 · 11:37 UTC
A claimed fresh breach dubbed HATICA reportedly bundles data from JPMorgan, BrowserStack and GE Healthcare, exposing records tied to major financial and healthcare targets. Third-party or vendor leaks like this enable downstream fraud, credential abuse and supply-chain targeting against connected organizations. Defenders at these firms and their partners should verify exposure and watch for credential-stuffing and phishing activity.
CategoryLeak
Severityhigh
Priority score71
Detected20 September 2026 · 11:37 UTC
Leak● 34
Bases de datos de sitios suizos comprometidas, incluido intranet.beesolutions.chA RaidForums user 'hexvior' announced the compromise of multiple Swiss websites and offered their databases, including intranet.beesolutions.ch, for exploitation. The type and scale of data are unspecified, but an exposed intranet database can reveal internal systems and business information. The post has no clear date and RaidForums is defunct, so treat it as possibly stale and verify before acting.Leak● 57
Base de datos de 600.000 registros de Acadian Ambulance (EE.UU.)A forum post indexed from a private board advertises a 600,000-record database belonging to Acadian Ambulance, a large US emergency medical services provider. Ambulance records typically contain patient identity, clinical and insurance data, making this a regulated healthcare exposure if authentic. The post date is hidden behind a login wall, so confidence in recency is limited but impact remains high.Leak● 66
Base de datos de 1 TB de la malasia Mah Sing Group filtradaSUB-ZER0 is advertising a 1 TB database belonging to Malaysian property developer Mah Sing Group (mahsing.com.my) on DarkNetArmy, posted minutes ago. A dataset of that size suggests full internal file shares, customer records or project documentation rather than a simple credential list. It matters to regional real-estate and construction partners as a potential source of supplier and client data for follow-on fraud.Leak● 84
Base de datos de 20,5 millones de ciudadanos del SENA Colombia a la ventaA seller is advertising a Colombian SENA dataset described as 20.5 million citizen records on the Spear Leaks forum. SENA holds learner enrolment, identity and contact data, so a dump of this scale would expose a large share of the Colombian population to identity fraud and targeted social engineering. Date is not visible, but the volume and the government nature of the entity make verification urgent.
Leak● 86
Base de datos de más de 200 municipios argentinos a la ventaUser SUB-ZER0 posted on DarkNetArmy a database covering institutional data of more than 200 Argentine municipalities, only minutes before collection. Municipal records typically include citizen contact data, employee accounts and internal directories useful for phishing and credential stuffing against .gob.ar services. Any exposure affecting hundreds of local governments at once is a strong indicator of a shared provider or platform compromise.Leak● 28
Base de datos de un casino europeo a la venta en un foroA user 'DataBasePro' posted a 'Fresh Casino Database (EU) for Sale' on Spear Leaks, offering customer data from an unnamed European online casino. The offer is dated June 2026, several months old and thus not a fresh alert, and the record count and contents are not disclosed. Gambling-sector databases are valuable for fraud and account takeover, so affected casino players and operators should still be aware.