BRIEFLeaklowP46
Mexico's NBXSoluciones mega leak: 7M VoIP users exposed
NBXSoluciones (Mexico)
Detected14 September 2026 · 14:12 UTC
A database attributed to Mexico's NBXSoluciones VOIP provider, over 7 million user records, has been published. It affects telecom customers with contact and call-related data. Although dated 2025 and therefore not fresh, it remains a large LATAM telecom exposure worth tracking for subscriber and credential risk.
CategoryLeak
Severitylow
Priority score46
Detected14 September 2026 · 14:12 UTC
Leak● 74
Filtracion de base de pagos de IZIPAY Peru, 3,64M registrosA merchant and payment database tied to Peru's IZIPAY platform, roughly 3.64 million records, is being offered on a darkweb forum. It likely contains customer, card, and transaction data affecting Peruvian merchants and consumers. This is a serious LATAM financial-sector leak that can fuel fraud and phishing campaigns.Leak● 22
Filtración de documentos del banco argelino Crédit Populaire d'AlgérieDocuments attributed to Crédit Populaire d'Algérie, Algeria's state-owned bank, are circulating, with a separate actor claiming the hack. The material is dated June 2025, so it is stale rather than a fresh alert, but leaked banking/customer documents can still fuel fraud and account takeover. Useful mainly as actor and sector background.Leak● 50
Base de datos de 50 millones de ciudadanos indonesios a la ventaAn actor using the handle JakartaGhostDigital is offering a database of roughly 50 million Indonesian records, a large-scale leak with heavy potential for fraud and account takeover. The volume makes it significant even though it is outside Latin America. No clear date is given, so freshness cannot be confirmed.Leak● 55
Filtración de la base de datos de C&A Modas MéxicoA database belonging to Mexican retailer C&A Modas was posted for download on DarkForums, likely containing customer and possibly employee records. The retailer operates widely across Mexico and Latin America, so affected data is regional. Posted in late March 2026, it is not fresh but still fuels credential stuffing and targeted phishing against customers.Leak● 45
Filtración de base de datos de la eléctrica keniana KETRACOA database belonging to Kenya Electricity Transmission Company (KETRACO), a national grid operator, was posted for sale on a leak forum, exposing internal data. Targeting a power-transmission utility matters because such data can enable espionage or follow-on intrusion against critical energy infrastructure. Though outside Latin America, it is a genuine critical-infrastructure victim worth tracking.Leak● 40
Filtración de código fuente de Lacoste 2026A leak advertised as Lacoste.com source code plus internal documents and CRM data from 2026 surfaced on a leak forum. Exposure of proprietary code and customer CRM records can aid further attacks and expose customer PII. Though the brand is not regional, the leak is recent and concerns a major global retailer.