BRIEFLeaklowP40
ERP dump of a UAE K-12 school for sale
Colegio K-12 (EAU)
Detected1 November 2026 · 17:24 UTC
A seller on the BDF club forum is offering a dump of the ERP system of a K-12 school in the United Arab Emirates, claiming the data is current up to the extraction date. School ERP platforms typically hold student, staff and financial records, so the sale could expose minors and sensitive operations. It falls outside the LATAM region but shows active monetization of education-sector ERP data.
CategoryLeak
Severitylow
Priority score40
Detected1 November 2026 · 17:24 UTC
Leak● 89
Filtración de base de datos del municipio de Moreno (moreno.gob.ar)User 'skyling' published on BreachForums a leak of a database tied to moreno.gob.ar, the domain of the Moreno municipality in Buenos Aires province, Argentina. The post does not state record volume, but it concerns a government entity, so exposed data could include citizen records, procedures and internal credentials. This is a fresh, region-relevant government leak that defenders of the Buenos Aires public sector should treat as a confirmed exposure.Leak● 45
Base de datos de 1,7 millones de usuarios de Nexo en circulaciónA xReactor thread advertises a 1.7-million-record customer database attributed to the crypto lending platform Nexo, including KYC-style identity data for a financially sensitive user base. The thread appears old (deep pagination, no fresh date), so it is not a new breach but still relevant for credential-stuffing and crypto-targeted phishing. Victims face high-value account takeover and extortion risk because balances and verified identities are involved.Leak● 80
Base de datos de millones de ciudadanos mexicanos a la ventaA DarkForums seller (Lyklekor) is offering a multi-million-record database of Mexican citizens, likely aggregated from electoral, civil registry or public-sector sources. Mexican citizen data fuels identity theft, credit fraud and targeting of public servants, and such dumps are usually split and resold in parts to evade detection. Fields such as CURP, RFC and address determine how exploitable the data is for downstream fraud.Leak● 89
Filtración de 1,1 GB de la Corte Superior de Justicia de Lima NorteA DarkForums actor (Lynfekor) published a 1.1 GB archive attributed to the Superior Court of Justice of Lima Norte, one of Peru's highest-volume judicial districts. Judicial archives typically contain case files, litigants' DNI and contact data, internal correspondence and staff accounts, exposing citizens, judges and clerks to extortion and targeting. Leaked judicial material can also reveal investigative details and protected witnesses.Leak● 94
Base de datos del RENIEC de Perú (31 millones) a la ventaA DarkForums actor (Jartezon) is advertising a 31-million-record extract of Peru's RENIEC national identity registry, the source of DNI numbers, full names, birth dates and addresses for essentially the entire adult population. A complete civil registry is the master key for mass identity fraud, SIM-swap, account takeover at banks and telecoms, and impersonation of public officials. Any Peruvian verification process that trusts DNI data alone must be considered compromised.Leak● 45
Base de datos del seguro social chino (474.000 filas) a la ventaA BreachForums seller is offering a 474,000-row database attributed to a Chinese government social security bureau, likely containing citizen identity and social-insurance records. Such data supports identity fraud and large-scale targeting of government beneficiaries, and the sample should be validated before resale spreads it further. Impact for Latin American defenders is limited, so it warrants tracking rather than immediate regional action.