The Municipalidad Distrital de Mejía (District Municipality of Mejía), a local government entity located in the Islay province of the Arequipa department, has allegedly been compromised via the digital platform “facilita.gob.pe.” The breach was disclosed by a threat actor who claims to have gained access to the municipality’s digital headquarters. According to the claims, the actor successfully extracted responses from administrative forms, specifically targeting the “Solicitud de acceso a la información pública” (Public Information Access Request) and “Mesa de partes” (Digital Desk) modules.
The sample data provided by the actor appears to contain sensitive logs of citizen interactions with the local government, dating from early 2024 to September 2024. The allegedly compromised data includes:
-
Full names (including paternal and maternal surnames)
-
National Identity Document (DNI) numbers
-
Taxpayer Identification Numbers (RUC)
-
Email addresses
-
Mobile phone numbers
-
Physical addresses (including District, Province, and Department)
-
Details of administrative requests and descriptions
-
Direct links to uploaded PDF documents (containing affidavits, resumes, and official letters)
Daily Dark WebRead More
R1
T1
