BRIEFLeakhighP82
Claimed 874 GB data leak from Fiserv
Fiserv
Detected20 October 2026 · 20:39 UTC
A forum user posted a claim of an 874 GB dump allegedly taken from Fiserv, the payments and core-banking processor behind First Data, Clover and hundreds of bank integrations. The volume suggests full database or file-share exfiltration rather than a small combolist. If genuine, downstream fraud, card and account data exposure could hit banks across the US and LatAm correspondents, so the claim should be validated before it spreads.
CategoryLeak
Severityhigh
Priority score82
Detected20 October 2026 · 20:39 UTC
Leak● 42
Filtración de base de datos del cartório brasileño 1cartoriosbc.com.brA threat actor posted a username:password database attributed to 1cartoriosbc.com.br, a Brazilian notary (cartório) web service, in a public leak forum. Notary offices hold identity, property and contract records, so even a site-level credential dump can feed account takeover against staff and downstream fraud. It is fresh and regionally relevant, though scale and record sensitivity are not yet confirmed.Leak● 78
Base de datos de vulnerabilidades de Ecuador publicada en foroA dataset titled as an Ecuadorian vulnerabilities database has been shared on a hacking forum, likely cataloguing vulnerable government systems or exposures. Such a list acts as a targeting map for intrusion into public entities and should be triaged against exposed services. It is fresh and tied to an actor actively dumping Ecuadorian state data.Leak● 40
Circulan 11 millones de credenciales de PoshmarkA bulk mail:pass list attributed to Poshmark with roughly 11 million email and password pairs is being re-shared across forums, without a clear original breach date. Large e-commerce credential sets like this fuel account takeover, resale fraud and password-spraying against unrelated services where users reused passwords. Treat it as recycled data for credential-hygiene monitoring rather than a fresh incident.Leak● 62
Filtración de base de datos de la telefónica PTML (Ufone)A fresh thread published yesterday claims to leak a database from Pakistan Telecommunications Mobile Limited (Ufone), a national mobile carrier. Telecom subscriber and employee records of this scale enable SIM-swap, phishing and account-takeover campaigns affecting millions of users. Although outside Latin America, it is a current large-scale leak worth tracking for downstream credential reuse.Leak● 30
Base de datos masiva brasileña de Serasa a la ventaA large Brazilian database attributed to Serasa, Experian's credit bureau, is circulating for sale or leak. Serasa holds credit and consumer financial data, so any genuine breach would be high-impact for fraud and identity theft. However the thread appears old/second-hand, so treat it as likely stale rather than a fresh breach; verify before alerting.Leak● 28
Base de datos de la Embajada de Albania en Moscú filtradaA leak thread from May 2023 claims to expose a database belonging to the Albanian Embassy in Moscow, a diplomatic target. The material is over three years old and concerns a single mission outside Latin America, so it is not a fresh alert. It is noted only as background on sustained targeting of diplomatic entities, which defenders of government networks may find contextual.