BRIEFLeakhighP71
Peru national registry: 20M+ citizen records leaked
Peru national registry (RUC/DNI data)
Detected7 November 2026 · 19:43 UTC
A BreachForums post offers download of an alleged Peru government national registry database containing 20M+ records with RUC, DNI and address fields. Such data enables mass identity fraud, targeted phishing and impersonation against citizens and businesses. Analysts should confirm the source and watch for resale of the dataset across criminal markets.
CategoryLeak
Severityhigh
Priority score71
Detected7 November 2026 · 19:43 UTC
LeakPriority 30
Combolist de credenciales de Perú con 48.000 registrosA 48,000-line email:password combolist tagged for Peruvian domains was posted to DarkForums on 7 November 2026 by user 'megatronishere'. It is a generic credential dump rather than a specific breach, but may contain valid .pe corporate or government logins. Peruvian defenders should screen for domain exposure and reset any matches.LeakPriority 30
Combolist de credenciales de Colombia con 51.000 registrosA 51,000-line email:password combolist tagged for Colombian domains was posted to DarkForums on 7 November 2026 by user 'megatronishere'. It is a generic credential dump rather than a targeted breach, but may contain valid .co corporate or government logins. Colombian defenders should check for domain exposure and reset matched accounts.LeakPriority 40
Volcado de 507 MB de logs de infostealer con credenciales frescasA 507 MB URL:login:password dump generated from infostealer logs dated 5 November 2026 was posted on Cracked.st as fresh 'VIP' material. It aggregates credentials from many victims rather than a single organization, so its value depends on matching your monitored domains. Defenders should screen the dump for their domains and reset any exposed accounts promptly.LeakPriority 35
Combolist de credenciales de México con 74.000 registrosA 74,000-line email:password combolist tagged for Mexican domains was posted to DarkForums on 7 November 2026 by user 'megatronishere'. It is a generic credential dump rather than a breach of a specific organization, but it may contain valid .mx corporate or government logins. Defenders in Mexico should screen for domain exposure and force resets on any matches.LeakPriority 52
Presunta filtración de base de datos nuclear de IránOn 7 November 2026 the DarkForums user 'santiagotaponero' posted a thread claiming to leak a database tied to Iran's nuclear energy sector. Scale and authenticity are unverified and such claims are often inflated, but a genuine leak would carry serious critical-infrastructure and geopolitical implications. Analysts should treat it as an unconfirmed but high-profile claim pending validation.LeakPriority 55
Colección de bases de datos de Ecuador filtradasA BreachForums thread advertises a bundled collection of leaked Ecuadorian databases for download, aggregating multiple datasets into a single release. Such compilations often combine older and newer breaches and can fuel credential stuffing and identity fraud against Ecuadorian users. Analysts should verify which sources and records are included before treating it as a new incident.