BRIEFGov / MilitaryhighP56
SCADA data leak from a water treatment plant in Indonesia
Water Treatment Plant (WTP), Indonesia
Detected7 October 2026 · 14:08 UTC
A collection of SCADA data from a water treatment plant (WTP) in Indonesia is posted on BreachForums. OT/SCADA exposure in critical infrastructure can reveal network layouts, credentials and control endpoints. Water utilities are high-impact targets, and this material can seed disruptive or destructive attacks.
CategoryGov / Military
Severityhigh
Priority score56
Detected7 October 2026 · 14:08 UTC
Gov / Military● 92
Base de datos del Gobierno de Tucumán filtrada: 90K registrosA 90,000-record database attributed to the Tucumán provincial government (tucuman.gob.ar) was posted for download on a cybercrime forum, with the thread appearing only minutes before collection. Leaked citizen and public-sector records enable identity theft, targeted phishing and credential stuffing against provincial services. Argentine public bodies should confirm the exposure, rotate credentials and watch for downstream fraud.Gov / Military● 85
Base de datos del Gobierno de Jalisco (jalisco.gob.mx) a la ventaAn actor just posted a purported database of the official Jalisco state government domain (Mexico) on DarkForums. Compromise of a state government portal can expose citizen records and internal credentials and act as a pivot into other public systems. High priority for Latin American critical-infrastructure defenders to verify and contain.Gov / Military● 58
Cancillería del Gobierno de Ecuador a la venta en BreachForumsA BreachForums marketplace listing names the Chancellery of the Government of Ecuador, indicating a possible leak or sale of data/access tied to a Latin American state body. If genuine, exposed records or credentials could enable intrusion into official channels and impersonation of government officials. Defenders should verify the claim and hunt for credential reuse against Ecuadorian government systems.Gov / Military● 48
Filtración de 100GB de la base de datos gubernamental rss.gov.iqAn actor is circulating a 100GB dump attributed to the Iraqi government site rss.gov.iq. A leak of this scale from a state portal means mass exposure of citizen records and internal data useful for identity fraud and state-targeted intelligence. It is outside AR-LatAm, but a large fresh government-data leak is worth tracking for TTP and victim-notification context.Gov / Military● 62
Volcado de base de datos del Gobierno de Nepal con acceso de administradorAn actor claims a full database dump, admin access, and compromise of a Nepal government entity plus a tech company. Government databases typically hold citizen PII, credentials, and internal systems, making this a serious breach even outside Latin America. The post signals an actor with live post-exploitation access whose TTPs are worth tracking.Gov / Military● 28
Oferta de datos/acceso a departamentos gubernamentales y militares de PakistánA seller ('ModernStealer') is advertising material tied to Pakistani government and military departments. Access to state or defence entities is inherently high value, but the listing dates to May 2026, is outside the AR-LATAM remit and gives no verified target list or scale. It is therefore not a fresh alert, though it hints at the seller's state-sector reach.