BRIEFLeakhighP52
Indonesian Ministry of Religious Affairs database leaked
Kementerian Agama Indonesia
Detected20 September 2026 · 07:37 UTC
A database attributed to Indonesia's Ministry of Religious Affairs is being shared, exposing government records and likely citizen data. Government ministry data is high-value for fraud, espionage and identity theft. Though outside the AR-LATAM region, it shows active targeting of public-sector entities.
CategoryLeak
Severityhigh
Priority score52
Detected20 September 2026 · 07:37 UTC
Leak● 34
Base de datos de 52 millones de Ucrania circula en foro turcoA 52-million-record Ukrainian database is being shared on SpyHackerz, one of the largest country-level dumps to surface on that forum, exposing a huge volume of personal and contact data. The original post is dated 2 July 2026, so it is not a fresh alert, and the country falls outside the Argentina/LATAM focus. It still matters as supply for credential stuffing and identity fraud affecting Ukrainian citizens and their foreign counterparts.Leak● 50
Base de datos de Herbiolys (Francia) con IBAN a la ventaA vendor is selling a dump attributed to the French company herbiolys.fr with about 1.3 million lines and roughly 1,500 unique IBAN records. Bank account data sharply raises fraud risk, enabling direct-debit abuse, invoice fraud and highly targeted phishing against customers and partners. French financial and retail defenders should treat the leaked payment identifiers as compromised.Leak● 45
Base de datos de 80.000 clientes de juandediego.es a la ventaA seller on the pwnfrm onion forum offers an 80,000-record database from the Spanish company juandediego.es, including CIF/NIF tax identifiers and IBAN bank details. Business and financial identifiers of this kind support invoice fraud, vishing and business email compromise against Spanish customers and suppliers. The dump should be confirmed and affected clients warned.Leak● 55
Base de datos SQL de 7 GB de la española Etestify a la ventaA seller advertises a 7 GB SQL export of etestify.com with around 84,000 member records, listed under Spain. Such dumps typically contain emails, hashed passwords and profile data usable for credential stuffing and phishing. Spanish organisations relying on the same platform or customer base should assess exposure and prepare notifications.Leak● 60
Venta de base de datos de 2 millones de líneas de helity.esA seller on an onion forum is offering a database attributed to helity.es, a Spanish company, containing roughly two million lines of records. A dump of this size enables credential stuffing, phishing and identity fraud against Spanish users, and any real customer data must be treated as exposed until verified. The listing appeared alongside multiple other country-specific database sales from the same vendor.Leak● 62
Base de datos del servicio de bomberos francés SDIS (7K registros) publicada por AplaGroupA threat actor using the handle AplaGroup is advertising a database allegedly belonging to a French fire and rescue service (SDIS), roughly 7,000 records, on the pwnfrm onion forum. Although small in volume, the victim is an emergency-services organization, so exposed data likely includes personnel, contact and operational details useful for spear-phishing or physical targeting. The post date is not visible in the recovered thread, so recency should be confirmed before escalating.