BRIEFLeaklowP30
Leads of Mexican bank customers offered for sale on forum
Bancos de México
Detected19 October 2026 · 03:39 UTC
A forum thread offers lead lists tied to Mexican bank customers, likely contact/PII data usable for phishing, vishing and account-takeover campaigns against retail banking users. The scale is unspecified and appears to be curated marketing leads rather than a full breach. It is regional and bank-sector relevant, but dated August 2024, so it is stale and should be treated as background context, not a fresh alert.
CategoryLeak
Severitylow
Priority score30
Detected19 October 2026 · 03:39 UTC
Leak● 32
Base de datos de Miruasia/Kandora filtradaA PwsForums thread advertises a database belonging to the Asian drama streaming platforms Miruasia/Kandora, likely exposing customer account records; the size is unconfirmed behind the paid section. Not tied to AR-LATAM government or critical infrastructure, so relevance is limited, but credential reuse could affect linked downstream accounts for defenders.Leak● 56
Filtración de archivo de proyecto del Cuerpo de Ingenieros del Ejército de EE. UU.A forum user posted an archive of project documents belonging to USACE (Hull 230 MCHD) today, 19 October 2026. The exact volume is unclear from the thread, but military engineering/contract documentation can expose internal infrastructure layouts and contractor identities. Defenders supporting USACE-linked projects should verify the exposure and watch for credential reuse against related portals.Leak● 68
Base de datos de FireColombia publicada en un foroA freshly published thread offers a database attributed to FireColombia, an emergency/fire-response related Colombian organization, posted within minutes of collection. Emergency-service data can expose internal contacts, personnel and operational details useful for social engineering or disruption. Colombian emergency and public-safety bodies should confirm the scope of the leak and treat any exposed credentials as compromised.Leak● 76
Filtración de empleados de la Secretaría de Educación de Guerrero (SEG)A forum actor is distributing what is advertised as a database of more than 70,000 employee records belonging to Guerrero State's Ministry of Education (SEG) in Mexico. Public-sector payroll and staff data enables targeted phishing, credential stuffing against government portals and identity fraud against civil servants. Mexican state entities should verify exposure of SEG accounts, force resets and watch for follow-on intrusion attempts.Leak● 48
Base de datos de la fintech Blend.com a la venta en un foroA Cracked.st seller is advertising a 'HQ database' of blend.com for sale, with a duplicate thread claiming freshly dumped data. Blend provides lending and account-opening software used by US banks and mortgage lenders, so any real dataset could carry customer PII and loan application data. The post date and record count are unverified, so validate sample data before alerting downstream financial-sector partners.Leak● 93
Base de datos de PetroEcuador/PetroAmazonas expuesta en BreachForumsA BreachForums user posted a download thread claiming an exposed database belonging to PetroEcuador/PetroAmazonas, Ecuador's state-owned oil and gas operator. Scale and exact contents are not confirmed in the listing, but a leak affecting a national energy company can expose employee credentials, internal systems and supplier data used by operational technology. Defenders in Ecuadorian energy should treat this as a possible precursor to intrusion or extortion and hunt for credential reuse.