BRIEFLeakhighP75
Grupo ATC (Mexico and USA) 23 databases for sale: 340 GB, 2 billion rows
Grupo ATC
Detected13 September 2026 · 04:12 UTC
A threat actor is selling 23 databases belonging to Grupo ATC across Mexico and the USA, totaling over 340 GB and roughly 2 billion unique rows. The scale implies large volumes of customer or identity data, directly relevant to Latin American breach monitoring. A leak this size can fuel fraud and credential-stuffing against Mexican users and partner organizations.
CategoryLeak
Severityhigh
Priority score75
Detected13 September 2026 · 04:12 UTC
Leak● 34
Base de datos de la financiera indonesia GPSFinance.co.id filtradaActor 'DBHunter' posted a 241MB dataset described as loan and investment records from the Indonesian financial services firm GPSFinance.co.id on the DarkNetArmy forum. Financial records combine identity data with loan amounts and repayment behaviour, ideal for loan fraud and highly convincing phishing. The thread started on 12 May 2026, so this is a months-old listing rather than a new alert.Leak● 38
Filtración de datos del Hospital Privado Egekent en Denizli, TurquíaA thread on LeakForum claims to hold extracted data from Denizli Private Egekent Hospital in Turkey, a private healthcare provider. Hospital datasets normally include patient identities, contact details and clinical or billing information, which are highly sensitive and valuable for insurance fraud and extortion. The listing is undated and behind a wall, so the volume and authenticity are still unverified.Leak● 55
Filtración gratuita de la base de datos de la provincia de KalimantanA user 'Mrsawit' published a free dump labelled as the database of Kalimantan province, an Indonesian regional government, on the Spear forum with several mirrors. Regional datasets of this kind usually contain civil registry, licensing and staff records that support phishing and impersonation of public offices. It was posted minutes ago and released free to all members, so it will spread quickly.Leak● 62
Venta de base de datos de los tribunales islámicos de MalasiaUser 'bytetobreach' is selling data allegedly taken from Malaysia's eSyariah court systems in the Spear marketplace. Judicial records typically hold full names, national ID numbers, addresses and case details of litigants, which enable identity fraud and targeted extortion. The thread is only hours old and the seller has prior listings, so this looks like an active sale rather than a repost.Leak● 48
Presunta filtración de datos del Ministerio de Ciencia de RusiaA LeakForum thread claims to expose data from the Russian Ministry of Science and Higher Education, a federal government body. Ministry records would include staff and institutional contacts that are valuable for targeted phishing against research and university networks. The thread content is restricted and no sample or record count is visible, so scope and authenticity remain unverified.Leak● 55
Filtración de base de datos de Pubali Bank Securities (Bangladesh)A BreachForums post advertises a database belonging to Pubali Bank Securities, a Bangladeshi brokerage house. Brokerage records usually contain identity documents, contact data and account details that directly enable fraud and account takeover. The public preview gives no record count, so the actual scale still needs to be established from samples.