BRIEFLeaklowP44
Multiple telecom operator data leaks published
Detected30 October 2026 · 20:24 UTC
Yirkolon posted 'Multiple Telecoms Leaks' on DarkForums on 30 October 2026, bundling data attributed to several telecom operators without naming them in the visible text. Telecom data underpins SIM-swap, subscriber-tracking and account-takeover campaigns against a critical-infrastructure sector. The lack of named victims keeps confidence low, but carriers should watch for the full release to see if their subscribers are included.
CategoryLeak
Severitylow
Priority score44
Detected30 October 2026 · 20:24 UTC
Leak● 62
Filtración de 500.000 registros de Kafene con SSN y datos bancariosA DarkForums seller claims a 500,000+ record breach of Kafene, a US consumer-finance/lease-to-own provider, including SSNs, banking data, credit scores and KYC documents. That combination is a full identity-theft kit and enables account takeover at partner merchants and lenders. It is a large, fresh-looking dump of a named real organization and should be validated quickly by the company and its banking partners.Leak● 66
Filtración de facturas del Instituto de Movilidad de Quintana RooA Spanish-language DarkForums post offers invoices issued by IMOVEQROO, the Quintana Roo state mobility institute in Mexico. Billing records usually carry names, RFC/tax IDs, addresses and payment details of citizens and contractors, enabling fraud and targeted phishing. It is a fresh-looking leak against a Mexican state agency, relevant to public-sector defenders in the region.Leak● 74
Filtración de 200.000 registros con CPF del gobierno de São PauloA DarkForums actor is distributing a 200,000-record database attributed to the São Paulo state government containing full names, CPF numbers, phone numbers and email addresses. CPF plus contact data is the core identity kit for Brazilian fraud, SIM-swap and phishing against citizens and public servants. Brazilian public bodies should treat this as a probable real citizen-data exposure until authenticity is disproven.Leak● 45
Base de datos de 11 millones de la japonesa STARX.CO.JP a la ventaActor 'SpartanX' advertised an 11-million-record database from the Japanese site STARX.CO.JP on DarkForums. At that scale the dataset likely contains user accounts and PII ripe for credential stuffing and fraud. Scale and target size make it notable despite being outside the AR-LatAm focus.Leak● 48
Filtración de datos de la hipotecaria estadounidense New American FundingForum user 'Jynxvumen' posted a 'New American Funding leak' on DarkForums. Mortgage lenders hold financial, identity and property records that are prime material for fraud and account takeover. Scale is not yet detailed, but the sector makes it worth tracking.Leak● 58
Filtración de datos de la aerolínea Plus Ultra en Venezuela y LatAmA free download on DarkForums advertises data from Plus Ultra, the Spanish airline that connects Madrid with Venezuela and several Latin American destinations. Airline records typically include passenger names, document numbers, itineraries and contacts, which fuel travel-themed phishing and identity fraud. Because the operator serves LATAM routes and is published openly, regional airlines and travel-sector defenders should compare it with their own exposure.