BRIEFLeakhighP55
Argentine citizens' data with national ID and email for sale
Detected5 November 2026 · 15:24 UTC
A seller on DarkForums is offering leads of Argentine citizens combining national ID (DNI) numbers with email addresses. DNI is a core identity document in Argentina, making the data valuable for account takeover and social engineering. Organizations serving Argentine users should watch for identity and credential abuse.
CategoryLeak
Severityhigh
Priority score55
Detected5 November 2026 · 15:24 UTC
Leak● 50
Base de datos de clientes de Phonehouse España a la ventaA consumer database attributed to the Spanish electronics retailer Phonehouse.es was posted for sale on DarkForums by user WSdatabase as a '2026' dataset. Customer records like these fuel phishing and account-takeover campaigns against Spanish consumers. Phonehouse and Spanish defenders should assess authenticity and notify affected customers.Leak● 71
Filtración de base de datos del gobierno de São Paulo, Brasil, con 200.000 registrosA 200,000-record database tied to the São Paulo state government (SP.GOV) was published on DarkForums including names, CPF, phone numbers and emails. CPF is Brazil's national taxpayer ID, so the leak raises identity-theft and fraud risk for affected citizens. Brazilian public-sector teams should confirm the exposure and monitor for misuse of the data.Leak● 80
Filtración de base de datos del gobierno de Coahuila, México, con 2 millones de registrosA database attributed to the Mexican state government of Coahuila, reportedly around 2 million records, was posted for download on DarkForums by user SUB-ZER0. Citizen data at this scale can enable identity fraud, phishing and targeting of state services. Mexican public-sector defenders should verify the claim and watch for leaked personal records.Leak● 64
Base de datos de Serasa Experian (Brasil) publicada con enlace de descargaA user on DarkForums (Olyndakron) has republished a Serasa Experian Brazil database with a working download link. Serasa is Brazil's largest credit bureau, so any dataset of consumer credit and identity records carries very high sensitivity. The content may be a re-post of an older breach, but given the scale and financial-sector impact it still warrants verification by Brazilian defenders.Leak● 78
Filtración de 3,6M de registros de negocios y transacciones de IziPay PerúA dataset advertised on DarkForums claims to contain 3.6M+ business and transaction records from IziPay, a Peruvian payment gateway. If genuine, this exposes merchant identities and payment/transaction metadata for a large share of Peru's card-accepting merchants. Payment-processor data is high-value for follow-on fraud and poses real risk to Peruvian financial-sector defenders.Leak● 44
Base de 6 millones de móviles alemanes con fecha de nacimientoDarkForums user Tazrozen posted 6 million German mobile numbers with dates of birth on 31 Oct 2026. This combination of identifiers enables SIM-swap, smishing and KYC bypass against real users. German telecoms and any service relying on SMS OTP for these subscribers should assess exposure and strengthen verification.