PULSE
FEED
ransomcurious worm reclama a benchmarkseniorliving.com · US · Healthcareransomaoqin reclama a Airblue · PK · Transportationransompanzer reclama a Ministry of Health Malaysia · MY · Government & Defenseransomkrybit reclama a cey-tech.com · CY · Technologyransommetaencryptor reclama a Promantra, Inc. · US · Technologyransomincransom reclama a CIMSA LOGISTICS · US · Transportationransomincransom reclama a HELP Foundation · US · Otherransomincransom reclama a gamechangerwm.com · US · Professional Servicesransomincransom reclama a raymondjames.com · US · Financial Servicesransomthegentlemen reclama a Esri South Africa · ZA · Technologyransomthegentlemen reclama a MEGATRANS · AR · Transportationransomthegentlemen reclama a United Pharmacy · SA · Healthcareransomthegentlemen reclama a Clancy Systems International · US · Government & Defenseransomthegentlemen reclama a Orennia · SE · Energy & Utilitiesransomcurious worm reclama a benchmarkseniorliving.com · US · Healthcareransomaoqin reclama a Airblue · PK · Transportationransompanzer reclama a Ministry of Health Malaysia · MY · Government & Defenseransomkrybit reclama a cey-tech.com · CY · Technologyransommetaencryptor reclama a Promantra, Inc. · US · Technologyransomincransom reclama a CIMSA LOGISTICS · US · Transportationransomincransom reclama a HELP Foundation · US · Otherransomincransom reclama a gamechangerwm.com · US · Professional Servicesransomincransom reclama a raymondjames.com · US · Financial Servicesransomthegentlemen reclama a Esri South Africa · ZA · Technologyransomthegentlemen reclama a MEGATRANS · AR · Transportationransomthegentlemen reclama a United Pharmacy · SA · Healthcareransomthegentlemen reclama a Clancy Systems International · US · Government & Defenseransomthegentlemen reclama a Orennia · SE · Energy & Utilities
Kalir Brief · Item28 September 2026 · 22:07 UTC
BRIEFGov / MilitaryhighP80

Doxing service selling Uruguayan government data

Gobierno de Uruguay

Detected28 September 2026 · 22:07 UTC
Reposts collapsed2
Why it matters

A seller is offering a doxing service built on Uruguayan government data, citizen records and an API for lookups. If genuine, it exposes state-held personal information on a national population and enables targeted identity fraud, doxing and social engineering. Defenders in Uruguay and the region should treat this as a potential data-access compromise and verify the source of the records.

MetadataRECORD
CategoryGov / Military
Severityhigh
Priority score80
Detected28 September 2026 · 22:07 UTC
Related items6
Gov / MilitaryPriority 55
Filtración de datos del Ministerio de Economía de IndonesiaA database linked to Indonesia's Coordinating Ministry for Economic Affairs was posted in DarkForums' Other Leaks section by user Kryvuxel. Leaks of government ministry data can expose officials' and partners' contacts and internal documents valuable for spear-phishing. No record count or date is shown, so the actual scale remains unconfirmed.
2h
Gov / MilitaryPriority 56
Datos del Ejército de Nigeria (OpNigeria) publicados en BreachForumsA BreachForums thread titled 'OpNigeria' advertises data attributed to the Nigerian Army. Military records are highly sensitive and can expose personnel and operational details. Although outside the AR-LATAM focus, this is a notable military-target leak worth flagging for regional defense-intelligence awareness.
15h
Gov / MilitaryPriority 85
Ransomware thegentlemen publica a la Municipalidad de Cieneguilla, PerúThe 'thegentlemen' ransomware group listed the Municipalidad Distrital de Cieneguilla, a district government in Lima Province serving roughly 100,000 residents. The listing references its citizen-facing platform for property tax queries and virtual document submission, implying exposure of resident and financial records. This is a fresh LATAM government victim and should be treated as an active incident.
15h
Gov / MilitaryPriority 76
Venta de acceso total a sistemas del Ministerio del InteriorA DarkForums actor is advertising complete access to the internal systems of a Ministry of Internal Affairs, published in the 'Leaks/Doxes For Sale' section on 12 November 2026. If genuine, this is a full government network compromise affecting police and interior-ministry records, identities and operational data, not just a single mailbox. Government CERTs and interior/security ministries should treat it as an active offer and verify whether the infrastructure matches any known exposure.
20h
Gov / MilitaryPriority 74
Filtración de base de datos de la UGEL Arequipa Norte, PerúA database labeled 'PERU: UGEL Arequipa Norte 2026' was posted in DarkForums' Leaks/Databases section, referencing the local education management authority of Arequipa, Peru. UGELs handle payroll and student data for public schools, so a leak could expose staff and student records. The post appears recent (2026) and targets Peruvian public-sector education.
21h
Gov / MilitaryPriority 90
Filtración de base de datos de COPECO, agencia de emergencias de HondurasA DarkForums user (hassen) posted on 11 Nov 2026 a database belonging to COPECO, Honduras' national disaster and emergency agency (copeco.gob.hn). Exposing an emergency-response body risks staff, citizen and operational data that can fuel targeted phishing and social engineering against government responders.
1d