BRIEFLeaklowP36
Data and source code leak of Turkish processors payzmoon, payzpool
payzmoon / payzpool (Turquía)
Detected18 October 2026 · 09:26 UTC
A seller is offering a database leak plus source code for payzmoon and payzpool, two high-risk payment processors operating in Turkey. Exposure of processor source code and transaction data can enable forgery, skimming insight and downstream fraud against merchants and cardholders. It is outside the AR-LATAM focus and unverified, so it ranks low but is worth noting for payment-fraud leads.
CategoryLeak
Severitylow
Priority score36
Detected18 October 2026 · 09:26 UTC
Leak● 33
Filtración de la base de datos de la federación deportiva francesa FSGTA database belonging to the French sports federation FSGT has been posted for free download on BreachForums across multiple pages, indicating an active release thread. Such federations hold member registrations, contact details and sometimes payment data, enabling targeted phishing of clubs and volunteers. It is a real organizational leak but outside Latin America and unquantified, so priority is limited.Leak● 62
Filtración parcial de la base de datos de la librería Cultura (Brasil)A partial database belonging to Cultura, a major Brazilian bookstore/retail chain, has been published on BreachForums for free download with mirrors, so it is already circulating widely. The exact record count is unconfirmed, but partial dumps of this kind typically contain customer names, emails and hashed or plaintext credentials usable for credential stuffing. Brazilian defenders should treat Cultura-linked accounts as compromised and hunt for reuse against corporate and government SSO portals.Leak● 48
Base de datos de Perú, Uruguay y Chile publicada en DarkForumsA DarkForums user posted a 'DATABASE' labeled PE, UR, CL minutes ago without naming the source organization. The country codes point to a dump or combolist targeting Peru, Uruguay and Chile that may contain corporate or public-sector credentials. Verification is needed urgently: if .gob.pe, .gub.uy or .gob.cl emails appear, the impact escalates immediately.Leak● 58
Brecha de datos de Getir: 900.000 y 1,2 millones de registrosA BreachForums post dated October 18, 2026 advertises a Getir breach spanning roughly 900,000 and 1.2 million records across two datasets. The Turkish rapid-delivery firm holds customer PII, delivery addresses and order history, ideal for phishing and account takeover. Defenders should check leaked emails against corporate SSO and watch for credential-stuffing spikes.Leak● 50
Base de datos de Revolut con datos de tarjetas a la ventaA seller is advertising a 'full Revolut database' of roughly 100k lines including credit card data, framed as a 2026 leak. Fintech customer data with card numbers enables card-not-present fraud and account takeover, though the claim is unverified and such ads are frequently recycled or inflated. Fraud and CTI teams should monitor for card BINs and customer records matching this listing before it spreads to carding shops.Leak● 70
SCARLETTGROUP afirma haber comprometido a NBCUniversalThe group SCARLETTGROUP posted a breach claim against NBCUniversal on BreachForums dated today, meaning data or samples may already be circulating to buyers. Media conglomerates hold employee, vendor and production data that supports downstream extortion and BEC against partners. Even before verification, this is a fresh public claim that defenders of media-sector entities and their suppliers should triage now.