BRIEFLeakhighP68
Handala publishes Israel Defense Forces (IDF) accounts
Israel Defense Forces (IDF)
Detected18 October 2026 · 06:26 UTC
The pro-Iranian group Handala has published a dataset of Israel Defense Forces (IDF) accounts, posted today. Compromise of military personnel credentials is high-impact for any defense-sector defender, enabling credential stuffing and targeted phishing against government systems. Monitor for reuse of these identifiers in access attempts and impersonation.
CategoryLeak
Severityhigh
Priority score68
Detected18 October 2026 · 06:26 UTC
Leak● 50
Base de datos de Revolut con datos de tarjetas a la ventaA seller is advertising a 'full Revolut database' of roughly 100k lines including credit card data, framed as a 2026 leak. Fintech customer data with card numbers enables card-not-present fraud and account takeover, though the claim is unverified and such ads are frequently recycled or inflated. Fraud and CTI teams should monitor for card BINs and customer records matching this listing before it spreads to carding shops.Leak● 70
SCARLETTGROUP afirma haber comprometido a NBCUniversalThe group SCARLETTGROUP posted a breach claim against NBCUniversal on BreachForums dated today, meaning data or samples may already be circulating to buyers. Media conglomerates hold employee, vendor and production data that supports downstream extortion and BEC against partners. Even before verification, this is a fresh public claim that defenders of media-sector entities and their suppliers should triage now.Leak● 78
Filtración de datos de la Secretaría de Educación de Guerrero (SEG)Documents advertised as belonging to Mexico's Guerrero State Ministry of Education (SEG) are being distributed, reportedly 28k records plus a list of @gob email accounts. Government email directories are high-value for targeted phishing, invoice fraud and lateral movement into education-sector systems. Although the exact posting date is unknown, the size and the .gob mail component make it worth immediate verification by Mexican education authorities.
Leak● 93
Filtración de 7 GB de base de datos del Gobierno de YucatánA forum user (Returnero) just published a 7 GB dump attributed to the Yucatán state government domain (yucatan.gob.mx), posted minutes before collection. Government portals concentrate citizen records, internal contacts and employee credentials, so the dump can fuel phishing against state offices and credential stuffing on .gob services. Defenders in Mexican state government should assume exposure and check for credential reuse on VPN, mail and portal accounts.Leak● 55
Brecha total del servidor del regulador bursátil de Turquía (SPK)A threat actor claims a full server compromise and root-level data leak of Turkey's Capital Markets Board (SPK), a national financial regulator, including source code. Source and internal data from a government financial authority pose regulatory and supply-chain risk. Although outside LATAM, it is a template worth tracking for how regional financial regulators could be targeted.
Leak● 88
Filtración de base de datos del Gobierno de Tucumán (1M de registros)An actor is distributing a ~1.5 GB database containing roughly 1 million records attributed to the Tucumán provincial government (tucuman.gob.ar). Leaked citizen or administrative data from an Argentine public body enables identity fraud, targeted phishing and abuse of provincial services. Defenders should verify the exposure, scope and which systems/records are involved immediately.