BRIEFLeaklowP40
Fresh batch of breached databases posted on BreachForums
Detected4 October 2026 · 03:55 UTC
BreachForums user 'dragonsec' posted a brand-new thread (dated 4 October 2026) advertising multiple breached databases. The specific victim organisations and record counts are not visible, but fresh multi-database dumps on a major leak forum typically spread quickly and are reused for credential stuffing and fraud. Defenders should watch for their own domains and user lists appearing in this material.
CategoryLeak
Severitylow
Priority score40
Detected4 October 2026 · 03:55 UTC
Leak● 28
Base de datos de BELFOR ASIA publicada en foro clandestinoA post advertises a leaked database attributed to BELFOR ASIA, a regional restoration/insurance services firm. If genuine it exposes customer and operational data useful for fraud and BEC. Detail is thin and scale is unconfirmed, so it is a marginal item pending verification.Leak● 50
Filtración de base de datos de 2,5 millones de ciudadanos de Bekasi, IndonesiaA database claiming 2.5 million records of Bekasi City citizens is posted for leak, likely including national IDs, addresses and personal data. Mass PII leaks of municipal populations enable identity fraud and downstream government-targeted phishing. It illustrates the risk profile that Latin American municipal/government databases share and is worth a defender's attention.Leak● 58
Filtración de 3,8 GB de documentos de drones militares UAV de Corea del SurA 3.8 GB archive of South Korean military UAV/drone documentation is being leaked on underground forums, exposing technical specs and program details. Leaks of this size on defense drone programs are strategically sensitive and can aid adversary reverse-engineering or targeting. Though outside the AR-LATAM region, it signals active exfiltration of military technical data worth tracking for CTI.Leak● 28
Filtración de datos de vehículos de Indonesia en DarkForumsUser 'WH1SP3R' published a freshly posted leak of what is described as Indonesian vehicle data on DarkForums. Vehicle registration datasets usually contain owner names, addresses, plate numbers and national IDs, which are directly usable for identity theft and fraud. The target is outside Latin America, but it is a fresh large-scale data leak that regional actors could recycle for social engineering or account takeover.Leak● 72
Base de datos de GameStop con 27 millones de registros a la ventaA threat actor is offering a 27-million-record GameStop database containing email:password combinations, claiming a value around $800M. Dumps of this size directly fuel credential stuffing and account takeover against the retailer and its customers. Defenders should force credential resets, watch for reused passwords and monitor for downstream fraud.Leak● 85
Filtración de base de datos SQL de la Universidad Pedagógica Nacional (México)A leaked SQL dump of Mexico's Universidad Pedagógica Nacional (UPN), a federal public education institution, is being posted on a dark-web forum within minutes of discovery. The dump likely exposes student, staff and internal records, giving attackers a working map of the institution's database. Defenders should identify the source of the leak, patch exposed services and prepare notification for affected individuals.