BRIEFLeaklowP45
Mexican PII database from Cosmotienda leaked
Cosmotienda (México)
Detected6 October 2026 · 03:07 UTC
A forum freebie advertises a 'Mexican PII Database - 2026' attributed to Cosmotienda, containing personal data of Mexican individuals. This is one of the very few regionally relevant items in the batch and could fuel identity theft, KYC fraud and targeted phishing against Mexican users. It matters for LATAM defenders monitoring exposure of local customer data, though the post is roughly six weeks old, so it is not a fresh breaking alert.
CategoryLeak
Severitylow
Priority score45
Detected6 October 2026 · 03:07 UTC
Leak● 46
Filtración de base de datos del comercio electrónico surcoreano metree.co.krA threat actor is offering a 2026 database allegedly belonging to South Korean e-commerce site metree.co.kr, posted on DarkForums within the last minutes. It sits outside Latin America, but it is a fresh breach of a named commercial entity likely containing customer PII and order data. Analysts in the region should still track it for credential-reuse risk and the actor's broader targeting pattern.Leak● 82
Filtración de datos de 51.000 estudiantes del CONAFE de MéxicoA threat actor posted a database claiming to contain the personal information of ~51,000 students tied to CONAFE, Mexico's federal education-support agency, on the DarkForums leak section and it appears freshly published. Exposure of minors' education records risks identity theft, extortion and social-engineering of families and staff. For defenders, this is a Latin American government-education data breach requiring verification and victim notification.Leak● 45
Filtracion de la base de datos de 1,49 millones de clientes de Binance.USA database of 1.49 million Binance.US (Authy) records with user_id and phone numbers was posted on a leak forum in February 2026. Binance.US is a regulated US crypto exchange, so the data is valuable for phishing and account takeover. It is not fresh, but the scale makes it a useful credential and exposure reference.Leak● 58
Base de datos de la agencia tributaria de Bangladesh a la ventaA seller is offering a Bangladesh government tax portal database (uniontax.gov.bd) containing roughly 563,000 lines with phone numbers and related records. It is a state tax authority, so this is a government data leak, though outside the LATAM region. Defenders tracking government exposures should note the affected agency and watch for resale.Leak● 62
Filtracion de documentos del Ejercito frances (Armee de Terre)Documents attributed to the French Ministry of Defense (defense.gouv.fr, Armee de Terre) are being leaked on BreachForums. A defense ministry document dump can expose internal operational or personnel information and is high-value for adversaries. Although outside LATAM, it is a military leak worth tracking for sector-wide TTPs.Leak● 72
Base de datos de 13,6 millones de Fortaleza (Brasil) a la ventaA database of over 13.6 million records tied to Fortaleza, Brazil is being offered on the DarkNetArmy forum. While the exact source is unclear, it is marketed as a large Brazilian dataset, which makes it directly relevant to LATAM defenders tracking regional data leaks. Organizations in Ceara should verify whether their customer or citizen data appears in it.