BRIEFLeaklowP60
Leak of credential combos of Brazilian users
Brazilian users
Detected18 July 2026 · 02:40 UTC
A list of 1 million credential pairs (username:password) focused on Brazil has been leaked. These combinations likely originate from data breaches of multiple online services. Attackers can use this list for credential stuffing attacks against Brazilian users, potentially compromising accounts across various platforms. This is relevant for defenders in Latin America due to the heightened risk of unauthorized access.
CategoryLeak
Severitylow
Priority score60
Detected18 July 2026 · 02:40 UTC
Leak● 52
Filtracion de 18M de credenciales stealer URL:login:passwordA freshly posted batch of roughly 18 million URL:login:password pairs from stealer logs dated 15/10/2026 has been released. Such dumps fuel credential-stuffing and initial access; any corporate or government credentials inside enable immediate account takeover. Defenders should monitor for matches and force resets on affected accounts.Leak● 54
Base de datos de universidad nacional en Morelos a la ventaA threat actor is selling a full database allegedly belonging to a national university campus in Morelos, Mexico. University records typically hold student, staff and applicant PII plus internal credentials, which are useful for phishing and account takeover. Institutional defenders in Mexico should confirm the exposure and rotate any compromised credentials.
Leak● 85
Base de datos de 600K registros del gobierno de Tamaulipas a la ventaA database attributed to the Tamaulipas state government (tamaulipas.gob.mx, Mexico) with roughly 600,000 records is being offered for sale on a dark web forum. If authentic, it exposes citizen PII such as names, identifiers and contact details, enabling fraud, phishing and targeted attacks. Government defenders should verify the leak and notify potentially affected residents.Leak● 55
Filtración de base de datos del partido Serbia SNS (progress.rs)A DarkForums post claims progress.rs, the Serbian Progressive Party's botting platform, was exposed and its database dumped. The leak could reveal supporters, operators and infrastructure tied to a ruling party, with disinformation and hacktivist implications. Though outside Latin America, it is a real, named organisation leak worth tracking.Leak● 85
Filtración de 120,7 millones de registros de educación de São PauloA 2026 BreachForums listing offers a São Paulo state education database of 120.7 million records (~36.3 GB), among the largest education-sector leaks in Latin America. It likely exposes student, parent and staff personal data, fuelling identity theft and phishing. Brazilian public-sector defenders should verify scope and prepare notifications.Leak● 92
Filtración de datos de la petrolera estatal boliviana YPFBA fresh BreachForums post advertises a leak tied to YPFB, Bolivia's state oil and gas operator and a key piece of Latin American energy critical infrastructure. If genuine, the dump could expose internal credentials and data enabling lateral movement, fraud or disruption at a strategic asset. Regional defenders should prioritise verification and containment.