BRIEFLeakhighP48
Spirit Cultural Exchange (US) dataset (170 GB) for sale
Spirit Cultural Exchange
Detected4 October 2026 · 18:55 UTC
A seller is listing a 170 GB dataset from US-based Spirit Cultural Exchange, an exchange-visitor program operator, likely containing participant PII such as passports and visa details. Such records enable identity theft and visa fraud. It matters as a sizable organisational data leak, though outside the AR-LATAM region.
CategoryLeak
Severityhigh
Priority score48
Detected4 October 2026 · 18:55 UTC
Leak● 48
Base de datos de clientes del banco ruso SovcombankA CSV dataset of roughly 131,000 rows from Russian bank Sovcombank is being distributed on DarkForums. The records appear to include customer account and contact details valuable for financial fraud. Although outside the LATAM region, it signals an active dump of a real bank and warrants monitoring for reuse against regional institutions.Leak● 68
Filtración de base de datos de 46 GB de CredifyA 46GB database reportedly belonging to Credify has just been posted for download on a leak forum. A dump of this size typically contains customer accounts, emails and personal data usable for credential stuffing and identity fraud. Organizations and partners whose users overlap with Credify should rotate credentials and watch for downstream abuse.Leak● 55
Venta de 1,45 TB de la plataforma educativa MSM UnifyA seller is offering a 1.45 TB dataset from MSM Unify, a global education and student-recruitment platform, suggesting a large-scale breach of applicant and institutional data. Education platforms hold passports, academic records and personal identifiers of international students. The volume indicates a significant compromise relevant to data-protection and fraud teams.Leak● 58
Venta de 179 GB de la plataforma de gobierno electrónico de Angola (SEPE)A seller on DarkForums is offering a 179 GB dataset from SEPE, Angola's public e-government platform, likely containing citizen and administrative records. Large government datasets fuel identity fraud and downstream targeting of public services. Although outside AR-LATAM, the scale and government nature make it a notable leak worth tracking.Leak● 32
Filtración de datos de la operadora rumana OrangeA database leak attributed to Romanian telecom Orange was posted on Spear Leaks, referencing a February 2025 breach. Telecom leaks expose subscriber and internal records, but this item is over a year old and outside the LatAm region. Treat it as background context, not a fresh alert.Leak● 68
Base de datos de Grindr con 21 millones de registros a la ventaA 21-million-record database attributed to Grindr is being offered for sale on DarkForums, posted 28 Sep 2026. A leak of this scale exposes a large user base with sensitive personal and location-linked data, raising extortion and privacy risks. Verify the sample and prepare user-notification guidance.