BRIEFLeakhighP68
New database leak of TAP Air Portugal (flytap.com)
TAP Air Portugal
Detected22 September 2026 · 18:43 UTC
A seller on DarkNetArmy is advertising a freshly obtained database belonging to TAP Air Portugal (flytap.com), posted within the last hour. If genuine it could expose customer PII, bookings and loyalty data of a national flag carrier. Verify the sample and watch for credential reuse and follow-on fraud.
CategoryLeak
Severityhigh
Priority score68
Detected22 September 2026 · 18:43 UTC
LeakPriority 45
Filtración de base de datos del gobierno de Irak (rss.gov.iq, 100 GB)A xReactor.org thread references a 100GB leak of the rss.gov.iq government database dated August 2026. If genuine, it represents a substantial exfiltration of Iraqi public-sector records with potential PII and account data. It is dated a few months back and concerns a non-LATAM target, so it is relevant mainly as background rather than a fresh alert for AR-LATAM defenders.LeakPriority 88
Base de datos completa del Gobierno de Paraguay a la ventaA BreachForums (bf.st) thread advertises a 'FULL DATABASE GOVERNMENT PARAGUAY,' implying a large-scale exfiltration of Paraguayan public-sector records. If authentic, it could expose citizen PII, internal accounts and administrative data across state entities. This is a high-value LATAM government leak that defenders must verify immediately and track for downstream fraud.LeakPriority 72
Filtración de datos del Ayuntamiento de Augusta, Georgia (augustaga.gov)A forum user (Lynlogor) published a data leak tied to the US municipal government domain augustaga.gov on DarkForums in mid-October 2026. The dump concerns a city government, so it likely contains employee, citizen or internal operational data whose exposure can enable phishing and account takeover. Defenders serving municipal government in the US should assess the scope and notify affected parties.LeakPriority 40
Conjunto de bases de datos de dominios .es de España ofrecido en foroA DarkForums user (Lurlevas) posted a bundle described as 'Spain .es databases' on November 7, 2026. The post gives no scale, source or named victim, so it may be an aggregation of previously leaked Spanish site data rather than a fresh breach. It is worth monitoring for Spanish organizations but carries low confidence without further detail.LeakPriority 48
Filtración de base de datos de CoinTrackerA DarkForums user (Pexvumen) posted a CoinTracker database leak on November 7, 2026. CoinTracker handles crypto portfolio and tax data tied to wallets and exchanges, so exposure raises risks of wallet-targeted phishing and financial fraud. Crypto users are frequently hit by targeted social engineering after such leaks.LeakPriority 48
Filtración de base de datos de CrunchbaseA DarkForums user (alex7646) posted a Crunchbase database leak on November 7, 2026. Crunchbase holds business and contact data on companies, investors and executives worldwide, making it useful for business-email-compromise and targeted phishing. The leak is not regional to LATAM but is a sizeable corpus of corporate intelligence.