BRIEFLeakhighP68
Full dump of Woflow merchant data platform (12M records) for sale
woflow.com
Detected16 September 2026 · 16:12 UTC
A full dump of Woflow, a US AI-driven merchant data platform, containing roughly 12 million records, is being offered on a raid forum in 2026. Merchant and business contact data at this scale fuels targeted phishing, account takeover and B2B invoice fraud. Defenders in e-commerce/payments should treat the dataset as live and hunt for credential reuse.
CategoryLeak
Severityhigh
Priority score68
Detected16 September 2026 · 16:12 UTC
Leak● 44
Filtración de base de datos del departamento de economía de la Academia Kyiv-MohylaA database belonging to the economics department of Ukraine's Kyiv-Mohyla Academy (economics.ukma.edu.ua) has been posted on a raid forum, likely with staff and student personal data and credentials. The post dates to mid-2026, so it is not fresh. It is outside Latin America but remains a real education-sector breach worth tracking for credential reuse.Leak● 28
Base de datos de CPF y datos personales de brasileños a la ventaA DarkForums post is offering a database of Brazilian CPF numbers together with personal details of citizens. The dump is not recent (early 2025) and the scale is unstated, but CPF-linked identity data can fuel fraud, account takeover and synthetic identities. It remains marginally relevant for LATAM defenders because the exposed PII persists long after posting.Leak● 50
Venta de pasaportes e identificaciones de Europa, América y AsiaA vendor is selling bulk scans and photos of passports and national IDs covering Europe, America, Asia and the Russian Federation. This is a large identity-document trove that enables fraud, KYC bypass and account takeover, and may include Latin American documents. Defenders should treat it as an identity-fraud risk and monitor for impersonation and document misuse.Leak● 38
Fuga de datos de clientes de Baydoner.com (1,3M pedidos)Customer orders and personal data for Baydoner.com, a restaurant chain, totaling roughly 1.3M records, are being offered on the DarkNetArmy forum. The listing is fresh (posted today), which raises the chance the data is current and usable for phishing or fraud. Relevance is limited because the victim is outside the AR-LATAM region.Leak● 42
Base de datos de Baker Distributing a la ventaData belonging to Baker Distributing Company, a US HVAC and refrigeration parts distributor, has been listed for sale on the DarkNetArmy forum. The post is only minutes old, indicating a fresh exfiltration or intrusion event rather than a recycled dump. It matters for supply-chain visibility of an industrial distributor, though the victim is outside the AR-LATAM region.Leak● 70
Filtración de datos del INSS de España: 3,18M pensionistasA database of 3,184,288 records linked to the Spanish Social Security institute (INSS), covering pensioners, is being sold on the DarkForums marketplace. It exposes names, national ID numbers and benefit/pension details of elderly citizens, a high-value pool for identity theft, pension fraud and social-engineering of public services. Although Spain sits outside LATAM, a government benefits database at this scale is a serious exposure that defenders in Spanish-speaking regions should track.