BRIEFLeakcriticalP84
EsqueleSquad massive leak hits data from Spain, Mexico, Argentina, Colombia and Ecuador
EsqueleSquad / multi-country LATAM databases
Detected2 October 2026 · 00:44 UTC
A threat actor using the handle EsqueleSquad is advertising a large multi-country database leak covering Spain, Mexico, Argentina, Colombia and Ecuador, tagged 2026. If authentic, it bundles citizen/customer records from several Latin American countries including Argentina, which is directly relevant to regional gov and critical-infra defenders. Defenders in these countries should begin credential and PII exposure monitoring and prepare victim notification workflows.
CategoryLeak
Severitycritical
Priority score84
Detected2 October 2026 · 00:44 UTC
Leak● 48
Filtración de base de datos completa de pasaportes e identidades de IsraelA database allegedly containing full Israeli passport and national identity records is being shared on SpyHackerz. Although outside the Argentina/LATAM scope, a national identity document leak is a high-impact event that can enable identity fraud and targeted attacks. Defenders with Israeli customers, partners or staff should treat it as a validation source for potential impersonation.Leak● 55
Volcado masivo de logs de stealer con 1.900 millones de cuentasA 543GB collection of infostealer logs (U:L:P, browser credentials) claiming over 1.9 billion accounts is being circulated as 'fresh' on SpyHackerz. This is a Credential-stuffing goldmine that can fuel account takeover against corporate and government services worldwide, including any exposed LATAM accounts. Defenders should assume corporate credentials may be present and prioritize password resets and MFA enforcement.Leak● 38
Filtración de 100.000 registros del banco marroquí Al BaridA database with roughly 100,000 records allegedly from Morocco's Al Barid Bank (a state-linked postal bank) has been posted on BreachForums. The dump reportedly contains account and login logs that could enable fraud and credential stuffing against the institution. It sits outside the Argentina/LATAM focus, so it is lower priority for regional alerting.Leak● 48
Filtración de base de datos de pasaportes de IsraelA full database of Israeli passports and identity documents is being shared on a hacking forum. Such government identity data can enable identity theft, document forgery, and targeted fraud at large scale. While outside the LATAM focus, its size and sensitivity make it notable.Leak● 52
Filtración de 400.000 correos de organismos públicos UK/IrlandaA seller is offering 400,000+ institutional email addresses harvested from UK and Ireland government and education organizations. Although not credentials, the list enables highly targeted phishing and spear-phishing against public bodies. Attackers frequently combine such lists with breach data to compromise accounts.Leak● 66
Base de datos de la cadena uruguaya TaTa a la ventaThe database of the official website of TaTa, a well-known Uruguayan supermarket chain, is being offered on BreachForums. If genuine, it would expose customer and possibly transactional data from a real Latin American retailer. Such leaks fuel phishing and fraud campaigns against consumers in the region.