BRIEFLeakhighP55
130,000 PII records from iscu.ac.kr for sale
iscu.ac.kr
Detected4 October 2026 · 08:55 UTC
A seller is offering a database of roughly 130,000 PII records tied to the Korean domain iscu.ac.kr. The data likely includes names and contact details of students or staff, ideal for phishing and credential abuse. Although outside AR-LATAM, it is a fresh, real-org database sale worth tracking for downstream fraud.
CategoryLeak
Severityhigh
Priority score55
Detected4 October 2026 · 08:55 UTC
Leak● 30
Filtración masiva de Diia (Ucrania): 20 M ciudadanosA thread re-shares a claimed 2025 mega leak of Ukraine's Diia state digital-identity platform affecting 20M+ citizens. The data involves national identity documents and personal records, making it highly sensitive, but the source is dated 2025 and is being recirculated rather than freshly breached. It is catalogued for context, not as a time-sensitive alert.Leak● 42
Base de datos del FCI Bank filtrada en foroA fresh DarkForums post advertises a leaked FCI Bank database, implying exposure of financial customer records. Banking datasets enable fraud, identity theft and credential attacks against the institution and its clients. The affected region and exact entity are unclear, so it is flagged for verification but still worth surfacing as a named financial leak.Leak● 54
Filtración de datos internos de Uber (uberhub, 20 M)A thread advertises data tied to uberhub.uberinternal.com with a claimed scale of over 20 million records. Internal corporate infrastructure data of this size can expose employee accounts, MDM and internal tooling, aiding lateral movement and follow-on intrusions. It merits attention for access and leak monitoring even though Uber is not a LATAM entity.Leak● 56
Filtración de datos de Air Miles España (travelclub.es)A database belonging to Air Miles España (travelclub.es), a Spanish loyalty and travel programme, is offered in a DarkForums leak thread. Such datasets typically contain personal data and account credentials of many members, enabling fraud, phishing and loyalty-point abuse. It matters for Spanish-speaking victims and for tracking a named corporate leak.Leak● 60
Filtración completa de la operadora Odido (Países Bajos)A post claims a full leak of Odido, a major Dutch telecom operator, a critical-infrastructure sector where data exposure is especially damaging. Telecom breaches expose subscriber data, SIM and account controls, enabling fraud and SIM-swap attacks. Even outside Latin America it is directly relevant to access/leak monitoring and worth surfacing for peer telecom defenders.Leak● 72
Filtración de base de datos de la brasileña PrivaliaA large set of roughly 1.8 million Privalia Brasil credentials (URL and password) is being shared on DarkForums, indicating a substantial retail database leak in Latin America. Privalia is a major fashion e-commerce brand in Brazil, so the exposed logins enable account takeover, fraud and reuse against other services. Regional defenders should force resets and watch for credential-stuffing and phishing leveraging this dataset.