BRIEFLeaklowP46
Mexico's NBXSoluciones mega leak: 7M VoIP users exposed
NBXSoluciones (Mexico)
Detected14 September 2026 · 14:12 UTC
A database attributed to Mexico's NBXSoluciones VOIP provider, over 7 million user records, has been published. It affects telecom customers with contact and call-related data. Although dated 2025 and therefore not fresh, it remains a large LATAM telecom exposure worth tracking for subscriber and credential risk.
CategoryLeak
Severitylow
Priority score46
Detected14 September 2026 · 14:12 UTC
Leak● 45
Presunta filtración de base de datos de empleados de YouTubeA user published a purported YouTube employee database on DarkForums on 29 October 2026, without verified scale or sample data. Employee records can fuel credential-stuffing, phishing and impersonation against staff. The claim is unconfirmed and should be validated before it is treated as a real breach.Leak● 60
Venta de filtración de 1 TB de datos de ministerios rusosA threat actor on DarkForums is selling a claimed 1TB dataset attributed to Russian government ministries and a Russian IT contractor. If genuine, it could expose internal documents, citizen records and infrastructure details across federal agencies. The scale and government target make it high-value intelligence, though the seller's claims remain unverified.Leak● 90
Base de datos de la distribuidora eléctrica Edesur (República Dominicana) a la ventaActor K3RN3L_P4N1C posted on DarkForums a 'DOMINICAN REPUBLIC EDESUR DATA' database belonging to the country's main electricity distributor, a critical-infrastructure operator. Although the record count is not shown in the visible snippet, customer, contract and possibly billing/ID data of a national utility is exactly the kind of asset used for fraud and for further intrusion. Any leak of utility subscriber data enables targeted phishing against customers and staff and can expose internal infrastructure details.Leak● 46
Base de datos de aeropuertos iraquíes con 8,6M registros a la ventaA seller on RaidForums is offering 8.6 million records described as MAG airports and Iraqi databases, a rare public sale listing touching aviation infrastructure. Aviation operators and Iraqi government entities should treat it as a possible breach of passenger, staff or contractor data. The post carries no visible date, so freshness and sample validity remain unconfirmed and it ranks below the fresher leaks.Leak● 50
Base de datos de clientes de Porsche con 280.000 registros a la ventaA DarkForums seller using the handle Marx posted a Porsche database of more than 280,000 records on 29 October 2026 in the marketplace section. The record fields are not public, but automotive customer databases typically hold names, addresses, emails and vehicle identification data used for phishing and warranty fraud. Dealers and vehicle owners in the brand's main markets should watch for targeted lures.Leak● 56
Venta de 1,03 millones de archivos de visados indonesiosA BreachForums seller is advertising 1.03 million Indonesian visa client files, about 613 GB parsed, containing passport images, national ID (KTP), family cards, bank details and selfies. This is a complete identity dossier set that enables account takeover, loan fraud and bypass of remote onboarding checks. Indonesian immigration services, banks and KYC-dependent fintechs should assume more than a million applicants are exposed.