BRIEFLeakhighP78
Possible Costa Rica database breach dumped
Costa Rica
Detected12 September 2026 · 23:12 UTC
A DarkForums user posted a Costa Rica database breach minutes before collection, offering the data for download. Costa Rica is a Latin American target, and if the set includes citizen, government or financial records the impact could be significant. The post is fresh, so defenders should triage quickly to confirm scope, sector and origin.
CategoryLeak
Severityhigh
Priority score78
Detected12 September 2026 · 23:12 UTC
Leak● 38
Filtración de 2,7 GB de registros de stealer recientesA 2.7 GB batch of freshly harvested stealer logs (URL:email:password) was posted on 12 September 2026, containing credentials captured from infected machines. No single organization is named, but a dump this size feeds credential-stuffing and account-takeover campaigns, so defenders should hunt for reuse of corporate emails and force rotation of any exposed passwords.Leak● 76
Base de datos de la Policía Nacional del Reino Unido a la ventaThe seller evilfoo is advertising the UK Police National Legal Database, a sensitive law-enforcement dataset, for sale on DarkForums. Leaked police data can fuel doxxing, impersonation and targeting of officers and legal staff. Posted in August 2026, this is a fresh and high-impact government leak worth prioritizing.Leak● 76
Base de datos del Ministerio de Educación del Reino Unido (education.gov.uk) a la ventaA seller on DarkForums is offering the UK Department for Education (education.gov.uk) database for sale. Government education records can expose student, staff and safeguarding data, and such sets are frequently resold to fraudsters. The listing is recent (August 2026), so UK public-sector defenders should verify exposure and monitor for reuse.Leak● 45
Base de datos de 140K de la tienda neerlandesa time4toys.nl a la ventaA seller is offering a 140,000-record database belonging to the Dutch retailer time4toys.nl in a DarkForums marketplace thread. The dataset likely contains customer personal and order data, enabling phishing and fraud against the shop's clients. It is a real named-company leak posted within the last month, though outside the AR-LATAM region.Leak● 90
Filtración completa de base de datos de Clínica Nacional de ChileA full database from Chile's Nacional Clinic is being offered on DarkForums, apparently cross-referenced with RENAPER, Argentina's national identity registry, exposing patient and identity records. Chile is LATAM critical health infrastructure and RENAPER data would implicate Argentine government identity records. The post is brand-new, so defenders in health and national identity services should treat this as a live exposure.Leak● 44
Filtración de base de datos de la Universidad Helenística (800.000 registros)A threat actor claims to have hacked a subdomain and leaked an 800,000-record database from Helenistik University. If genuine, the dump exposes student and staff PII usable for fraud, doxing and credential-stuffing attacks. The claim comes from the TurkHackTeam/AnkaTeam collective and should be verified before use.