A staggering breach has exposed the personal data of over 5 million Salvadorans, marking the largest cyber incident in the country’s history. The hacker responsible for this egregious act has made a trove of sensitive information readily accessible for free download since Saturday, posing a grave threat to the affected individuals.
The compromised data includes a wealth of personally identifiable information such as full names, birth dates, phone numbers, residential addresses, email addresses, and the equivalent of social security numbers known as DUI numbers. Alarmingly, the breach also encompasses millions of high-definition, unwatermarked headshot photos of Salvadorans, further exacerbating privacy concerns.
This massive breach has far-reaching implications, affecting a significant portion of Salvadoran adults, including those residing abroad as part of the diaspora. With approximately 6.6 million Salvadorans in total, the scale of this breach is unprecedented and deeply troubling.
The data leak, totaling a staggering 144GB in size, has been circulating on the dark web since August, initially available for download at a steep $250 fee. However, following the victims’ failure to meet the hacker’s ransom demands, the perpetrator opted to release the information for free as a punitive measure.
Confirmation of the breach has been provided by La Prensa Gráfica, a reputable Spanish-language newspaper headquartered in El Salvador, underscoring the severity of the situation.
New Issues in El Salvador
Amidst this cybersecurity crisis, El Salvador finds itself grappling with a host of socio-political challenges. Under the leadership of President Nayib Bukele, the country has witnessed controversial actions, including the installation of judges to amend the constitution, enabling Bukele to extend his presidential term beyond previously-established limits. Bukele’s approach to tackling gang violence, which includes extrajudicial measures, has stirred significant controversy both domestically and internationally.
Furthermore, Bukele’s unilateral decision to adopt bitcoin as legal tender has sparked widespread debate and raised concerns about transparency and public consultation. Against this backdrop, El Salvador has emerged as a hub for cryptocurrency operations, with companies like iFinex and its subsidiaries playing a prominent role in shaping financial policies and initiatives.
As El Salvador grapples with the fallout from this unprecedented data breach, the incident underscores the pressing need for robust cybersecurity measures and heightened vigilance in safeguarding personal information in an increasingly digital world.