BRIEFGov / MilitarycriticalP84
Database leak of ESE Cartagena de Indias (Colombia)
ESE Cartagena de Indias (esecartagenadeindias.gov.co)
Detected22 September 2026 · 19:43 UTC
A mirrored posting confirms the leak of a database from esecartagenadeindias.gov.co, the state health enterprise of Cartagena de Indias, Colombia, exposing regional, municipal, name and identifier fields. Posted minutes ago, the data is fresh and circulating across multiple forums, raising re-use risk. Operators should prioritize notification and credential-hygiene actions for the affected Colombian public entity.
CategoryGov / Military
Severitycritical
Priority score84
Detected22 September 2026 · 19:43 UTC
Gov / Military● 84
Filtración de base de datos de la ESE Cartagena de IndiasA threat actor is leaking a database belonging to esecartagenadeindias.gov.co, the state health enterprise of Cartagena de Indias, Colombia, containing regional, municipal, first and last names and other personal identifiers. The post is only minutes old, so the dump is fresh and likely still unsold. Defenders should treat Colombian public-health and municipal PII as actively weaponizable for phishing, identity fraud and follow-on intrusions against public services.Gov / Military● 72
Filtración de datos personales de trabajadores de la Municipalidad de Barranca (Perú)A database of municipal workers from Barranca (gob.pe) is being shared, exposing full names and national DNI identity numbers. This is Peruvian government PII, enabling identity theft, targeted phishing and impersonation of public employees. Any LATAM public-sector leak of government staff identifiers warrants immediate verification and notification.Gov / Military● 35
Base de datos del Ejército de Venezuela publicada en foro clandestinoA thread claiming to hold a Venezuela Army database has been circulating on a dark forum, which would involve military personnel data of a LATAM country. However, the post is dated April 2023, so it is an old leak rather than a fresh compromise and its current accuracy is uncertain. Still relevant for background on military PII exposure but not an actionable alert today.Gov / Military● 35
Sitio gubernamental iraquí ngoao.gov.iq vulnerado y filtradoThe Iraqi government portal ngoao.gov.iq was breached and its data leaked in June 2025 by an actor using the handle henrymans0n. Government records of this kind can expose citizen data and internal systems. It is dated and outside Latin America, so it is lower priority but useful as regional government-leak context.Gov / Military● 78
Filtración de base de datos de la Alcaldía Municipal de Jamundí, ColombiaA database belonging to the municipal government of Jamundí (Valle del Cauca, Colombia) is offered/leaked on an underground forum, exposing data from a Latin American government body. Such dumps typically contain citizen records, contact details and internal documents that fuel targeted phishing and identity fraud. Government leaks in the region warrant immediate notification and validation with the affected entity.Gov / Military● 82
Actualización de filtración de base de datos de la Alcaldía de Jamundí, ColombiaAn updated dump attributed to the municipal government of Jamundí (Valle del Cauca, Colombia) has been posted on an underground forum, indicating an ongoing or expanded breach of a government entity. Municipalities hold resident PII, payroll, contracts and internal administrative data useful for fraud and social engineering. A fresh 'update' suggests the actor still has active access or fresh data, raising urgency for CERT/institutional response.