BRIEFGov / MilitarylowP44
Claimed data breach of the US IRS leaked
IRS (irs.gov), United States
Detected11 September 2026 · 10:12 UTC
A forum user posted a claimed leak of irs.gov data with a downloadable file, advertising it as a US government breach. US tax-agency data is high-value for identity theft and tax fraud if the leak is genuine. The post dates from September 2025, well over a year old, so it is stale and likely a lure — verify the sample before acting.
CategoryGov / Military
Severitylow
Priority score44
Detected11 September 2026 · 10:12 UTC
Gov / Military● 28
Filtración de datos de ministerios del gobierno de CubaAn older leak (June 2023) covers Cuban government domains including minem.cu (energy and mines ministry), mincex.gob.cu and cult.cu. Despite being stale, it exposes official credentials and data tied to Cuban state infrastructure, including the energy sector, and may still fuel credential-stuffing and phishing.Gov / Military● 93
Filtración del portal de Aviación Civil de Ecuador (aviacioncivil.gob.ec)A BreachForums user (TerroahOver) posted the Ecuadorian civil aviation authority portal aviacioncivil.gob.ec to the Databases section on 10 Sep 2026, claiming the government site was breached. Aviation regulatory bodies hold internal credentials, operational and personnel data, making this high-value LATAM government infrastructure. Defenders should treat exposed credentials as compromised and hunt for reuse across related .gob.ec systems.Gov / Military● 88
Filtración de base de datos del Portal de Transparencia de PerúA threat actor published a database belonging to the Government of Peru's Transparency Portal (Portal de Transparencia), a public-sector platform hosting official documents and citizen requests. A leak tied to a .gob entity enables phishing, impersonation of officials and further intrusion into government networks. Peruvian public administration defenders should verify the scope and rotate any exposed credentials immediately.Gov / Military● 62
Venta de datos de la Comision Electoral de IrakA verified seller is offering data allegedly stolen from Iraq's High Electoral Commission on DarkForums. Electoral and voter records are politically sensitive and enable identity fraud and targeting of individuals. Posted on 2026-08-21, it remains a meaningful, relatively recent government data sale.Gov / Military● 70
Base de datos del portal de compras de Marruecos (PMMP) filtradaThe full database of Morocco's public procurement portal (PMMP) has reportedly been breached and posted on DarkForums. Procurement data exposes supplier, contract and contact details that are useful for fraud and social engineering. It is a government-sector leak affecting the state purchasing ecosystem.Gov / Military● 75
Base de datos del Ministerio de Finanzas de Nepal filtradaA threat actor claims to have breached the Nepal Ministry of Finance database and is distributing it on DarkNetArmy now. Government financial records are highly sensitive and can enable fraud, identity theft and further targeting of state systems. Defenders should treat this as a real, fresh government-sector data exposure.