BRIEFLeaklowP20
pintando.com.mx Database 2025-2026 Breached
pintando.com.mx
Detected4 July 2026 · 02:29 UTC
Database leak of a Mexican commercial site, but not critical infrastructure.
CategoryLeak
Severitylow
Priority score20
Detected4 July 2026 · 02:29 UTC
Leak● 63
Venta de 11,4 millones de documentos de identidad de EspañaThreat actor 'The Negratas' is offering roughly 11.4 million Spanish national ID (DNI) documents for sale, posted around June 2026 on a Russian-language forum. The dataset enables large-scale identity theft, account-opening fraud and impersonation of Spanish residents. Although not fresh, its scale makes it a key reference for monitoring identity fraud across the Spanish-speaking world.Leak● 60
Filtración de datos de alumnos de escuela de Rosario (edu.ar)A user ('skyling') posted an alumni database for the Argentine school domain sagradorosario.edu.ar on BreachForums on 15 Oct 2026. It exposes student and alumni personal data useful for phishing and credential reuse against a Latin American education institution. The leak is fresh, so verify the exposure and notify affected students and families.Leak● 38
Filtración de 214.064 registros de usuarios de fitness1.bgA dataset of 214,064 user records from the Bulgarian fitness chain fitness1.bg, including names, emails, phones and addresses, has been leaked. The PII supports phishing, credential stuffing and physical targeting of members. It is outside the AR-LATAM region and moderate in scale, so it is a secondary item for regional defenders.Leak● 48
Base de datos búlgara de 3,2 millones de contactos a la ventaA seller is offering a fresh 3,196,563-record Bulgarian database spanning crypto, business and gambling leads. Large, sector-tagged contact lists fuel phishing, fraud and account-takeover campaigns against the named verticals. Defenders and fraud teams in those sectors should assume their customer data may be circulating.Leak● 52
Venta de 11,4 millones de documentos de identidad españoles (The Negratas)A seller known as The Negratas is offering 11.4 million Spanish identity documents, a huge PII trove enabling identity theft, fraud and account takeover. The thread dates to June 2026, so it is not a fresh alert, but the volume and sensitivity keep it relevant for Spanish-speaking defenders tracking downstream abuse.Leak● 62
Filtración de 2 GB de código fuente de un programa gubernamental español (PSOE)A 2 GB archive said to contain the source code of a Spanish government program linked to the PSOE party is being shared on DarkForums. Source-code leaks expose hardcoded credentials, API keys and internal endpoints, giving attackers a roadmap for follow-on intrusions. Spanish public-sector defenders should hunt for exposed secrets and monitor abuse of leaked endpoints.