[Single source] MortemTeam claims leak of 15.2 million Nosis records
MortemTeam claims it breached Argentine credit, commercial and identity reporting firm Nosis. A later post offers the alleged business-report database for download, citing about 15.2 million unique records.
In 30 seconds

The latest evidence says an underground-forum listing offered a purported Nosis business-report database for download after MortemTeam claimed it had breached the Argentine reporting company. The dataset is said to contain about 15.2 million unique records, but neither the breach nor the data has been independently verified.DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list
What happened
DailyDarkWeb reports that MortemTeam posted its claim on November 10, 2026. A subsequent forum listing reportedly described the material as a full release of Nosis's business-report database and provided a download.DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list
Why it matters
If authentic, records combining identity, contact, credit and legal information could help criminals craft convincing phishing messages or attempt identity and loan fraud against Argentine consumers and businesses. That risk remains conditional because the dataset has not been validated.DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list
What to do
People and companies in Argentina should treat unexpected messages involving debts, credit reports or personal identifiers with extra caution. Verify requests through an independently obtained contact channel rather than links or phone numbers supplied in the message.DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list
Confirmed and still uncertain
The evidence establishes that DailyDarkWeb documented the claim and warned readers not to treat it as confirmation. It does not establish that Nosis was breached, that the download is genuine, that every advertised field is present or that 15.2 million distinct people are affected. The post also says Nosis had not commented publicly at that point.DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list
What people are saying
MortemTeam is described as claiming responsibility for the breach, while DailyDarkWeb explicitly labels the story an unverified threat-actor claim. The monitoring account also notes that some of the group's recent claims involving Latin American and Spanish targets have been disputed by the named organizations.DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list
Evolution
The reported sequence began with MortemTeam's November 10 breach claim and progressed to a later forum post advertising a downloadable database. That later listing added scale and content details, but no independent validation or response from Nosis accompanied the evidence.DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list
Reach
1 independent groups, 1 updates, and 0 engagements.
Technical detail
The advertised fields reportedly include DNI and CUIT or CUIL tax identifiers, addresses, phone numbers, credit scores, central-bank debtor status, rejected checks, lawsuits and bankruptcy records. No sample analysis or technical evidence in the supplied item confirms that these fields came from Nosis.DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list
Sources and evidence
The supplied evidence consists of one DailyDarkWeb post on X, including an attached image and a summary of the alleged forum activity. There is no direct Nosis statement, incident notice, independently examined dataset or original forum post in the evidence batch, so attribution and impact remain unresolved.DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list
Sources
- DailyDarkWebx.com · DailyDarkWeb · x


