BRIEFLeaklowP30
Ukraine Diia mega leak: 20M citizens exposed
Diia (Ucrania)
Detected14 October 2026 · 03:53 UTC
A thread re-shares a claimed 2025 mega leak of Ukraine's Diia state digital-identity platform affecting 20M+ citizens. The data involves national identity documents and personal records, making it highly sensitive, but the source is dated 2025 and is being recirculated rather than freshly breached. It is catalogued for context, not as a time-sensitive alert.
CategoryLeak
Severitylow
Priority score30
Detected14 October 2026 · 03:53 UTC
Leak● 42
Base de datos del FCI Bank filtrada en foroA fresh DarkForums post advertises a leaked FCI Bank database, implying exposure of financial customer records. Banking datasets enable fraud, identity theft and credential attacks against the institution and its clients. The affected region and exact entity are unclear, so it is flagged for verification but still worth surfacing as a named financial leak.Leak● 54
Filtración de datos internos de Uber (uberhub, 20 M)A thread advertises data tied to uberhub.uberinternal.com with a claimed scale of over 20 million records. Internal corporate infrastructure data of this size can expose employee accounts, MDM and internal tooling, aiding lateral movement and follow-on intrusions. It merits attention for access and leak monitoring even though Uber is not a LATAM entity.Leak● 56
Filtración de datos de Air Miles España (travelclub.es)A database belonging to Air Miles España (travelclub.es), a Spanish loyalty and travel programme, is offered in a DarkForums leak thread. Such datasets typically contain personal data and account credentials of many members, enabling fraud, phishing and loyalty-point abuse. It matters for Spanish-speaking victims and for tracking a named corporate leak.Leak● 60
Filtración completa de la operadora Odido (Países Bajos)A post claims a full leak of Odido, a major Dutch telecom operator, a critical-infrastructure sector where data exposure is especially damaging. Telecom breaches expose subscriber data, SIM and account controls, enabling fraud and SIM-swap attacks. Even outside Latin America it is directly relevant to access/leak monitoring and worth surfacing for peer telecom defenders.Leak● 72
Filtración de base de datos de la brasileña PrivaliaA large set of roughly 1.8 million Privalia Brasil credentials (URL and password) is being shared on DarkForums, indicating a substantial retail database leak in Latin America. Privalia is a major fashion e-commerce brand in Brazil, so the exposed logins enable account takeover, fraud and reuse against other services. Regional defenders should force resets and watch for credential-stuffing and phishing leveraging this dataset.Leak● 86
Filtración de datos de Santander México: 7 millonesA threat actor is re-sharing a database allegedly holding 7 million Santander México customer records, with a new download link posted recently. Santander is one of Mexico's largest banks and part of the financial critical infrastructure, so exposure of customer and financial data fuels fraud, account takeover and targeted phishing. Defenders should treat this as an active redistribution and monitor for credential-stuffing against banking services.