BRIEFLeakhighP62
Partial database leak of Brazilian bookstore chain Cultura
Cultura (Livraria Cultura, Brasil)
Detected18 October 2026 · 09:26 UTC
A partial database belonging to Cultura, a major Brazilian bookstore/retail chain, has been published on BreachForums for free download with mirrors, so it is already circulating widely. The exact record count is unconfirmed, but partial dumps of this kind typically contain customer names, emails and hashed or plaintext credentials usable for credential stuffing. Brazilian defenders should treat Cultura-linked accounts as compromised and hunt for reuse against corporate and government SSO portals.
CategoryLeak
Severityhigh
Priority score62
Detected18 October 2026 · 09:26 UTC
Leak● 38
Base de 672k contactos profesionales de Wuzzuf a la ventaA forum user is selling a 672k-record database of wuzzuf.net, an Egyptian recruitment platform, said to contain emails, phone numbers and user profiles. It is a real, sizable professional-contacts leak useful for phishing and credential-stuffing campaigns. Not region-critical, but a notable PII exposure worth tracking for downstream targeting.Leak● 58
Asociación de Fútbol de Emiratos a la venta: 122 GB filtradosA seller is offering 122 GB allegedly taken from the UAE Football Association, including over 70,000 documents, posted just yesterday. As a national governing body, the trove could hold contracts, member and sponsor records and internal correspondence. Treat it as a serious data sale carrying fraud, impersonation and supply-chain risk.Leak● 33
Filtración de la base de datos de la federación deportiva francesa FSGTA database belonging to the French sports federation FSGT has been posted for free download on BreachForums across multiple pages, indicating an active release thread. Such federations hold member registrations, contact details and sometimes payment data, enabling targeted phishing of clubs and volunteers. It is a real organizational leak but outside Latin America and unquantified, so priority is limited.Leak● 36
Fuga de datos y código fuente de las pasarelas turcas payzmoon y payzpoolA seller is offering a database leak plus source code for payzmoon and payzpool, two high-risk payment processors operating in Turkey. Exposure of processor source code and transaction data can enable forgery, skimming insight and downstream fraud against merchants and cardholders. It is outside the AR-LATAM focus and unverified, so it ranks low but is worth noting for payment-fraud leads.Leak● 48
Base de datos de Perú, Uruguay y Chile publicada en DarkForumsA DarkForums user posted a 'DATABASE' labeled PE, UR, CL minutes ago without naming the source organization. The country codes point to a dump or combolist targeting Peru, Uruguay and Chile that may contain corporate or public-sector credentials. Verification is needed urgently: if .gob.pe, .gub.uy or .gob.cl emails appear, the impact escalates immediately.Leak● 58
Brecha de datos de Getir: 900.000 y 1,2 millones de registrosA BreachForums post dated October 18, 2026 advertises a Getir breach spanning roughly 900,000 and 1.2 million records across two datasets. The Turkish rapid-delivery firm holds customer PII, delivery addresses and order history, ideal for phishing and account takeover. Defenders should check leaked emails against corporate SSO and watch for credential-stuffing spikes.