BRIEFGov / MilitaryhighP76
Massive leak exposes 70,000 Moroccan intelligence agents
DGST (Marruecos)
Detected21 September 2026 · 14:37 UTC
A leak attributed to the 'Jabaroot' group exposed roughly 70,000 members of Morocco's DGST intelligence service, including identities, photographs and contact details. Publishing this data can unmask undercover officers and enable targeting, retaliation and follow-on phishing against them. It is a landmark government intelligence breach that CTI teams should track even though it falls outside the LATAM region.
CategoryGov / Military
Severityhigh
Priority score76
Detected21 September 2026 · 14:37 UTC
Gov / Military● 86
Base de datos del Gobierno de Colombia publicada en DarkForumsDarkForums user Abrtodor posted a 'Colombian Government Database' on 5 Nov 2026 for download, without naming the agency or record count. If authentic, it exposes citizen PII held by a state body, enabling identity fraud and phishing against public employees. Colombian public-sector teams should verify exposure and hunt for reuse.Gov / Military● 64
Filtración de datos de la Policía Brimob de IndonesiaA data breach of Korps Brimob, Indonesia's paramilitary police corps, was posted for download on DarkForums in late October 2026. Exposed law-enforcement data can include personnel, operational or contact records that are valuable for social engineering and targeting. Breaches of police entities raise direct operational and national-security concerns.Gov / Military● 62
Filtración en el Instituto de Tecnología Espacial de PakistánA data leak attributed to Pakistan's Institute of Space Technology was posted on DarkForums on 4 November 2026 by user Soldeitoz. This is a government-linked space and defense research institution, so exposed data could include staff, project or access information. Compromise of such organizations carries national-security and supply-chain relevance.Gov / Military● 92
Filtración de base de datos del Gobierno de ArgentinaA BreachForums thread published by the actors MortemTeam, KonataIzumiLeaks and Narcos515 advertises a database dump attributed to the Argentine government. The exact agency and record count are not visible in the listing, but any bulk exfiltration of .gob.ar data implies exposure of citizen records, staff credentials and internal directories useful for follow-on phishing and access. Defenders in the Argentine public sector should treat this as a live exposure until the sample is verified.Gov / Military● 92
Base de datos de la Policía Federal Argentina ofrecida en BreachForumsA user named 'skyling' posted a thread titled 'DATABASE Argentina Federal Police (PFA)' in the Databases/Leaks section of BreachForums (bf.st), advertising a stolen PFA dataset. The Argentine Federal Police is a national security force handling federal crime, so any leaked personnel, credential or case data is a direct counter-intelligence and insider-risk problem. The exact volume and date are not visible, but a named government victim on a major leak forum warrants immediate verification.Gov / Military● 74
Supuesto material confidencial del Ministerio de Defensa de Brasil publicadoA thread on an onion forum advertises 'Free BRAZIL Confidential Ministry of Defense advanced radar defense space based surveillance' material, suggesting documents on military radar and space-based sensor programs were offered for free. The body is login-walled, so authenticity and scope are unconfirmed, and no date is visible. If genuine, public disclosure of radar/surveillance technical data would directly aid adversary collection and targeting against Brazilian defense systems.