guille

🇺🇾 A threat actor operating under the name “LaPampaLeaks” has claimed responsibility for a major breach allegedly affecting Antel’s TuID Digital platform in Uruguay — a government-linked digital identity and citizen authentication system operated by the state-owned telecommunications provider Antel. According to the post, the attackers claim they maintained long-term access to TuID Digital infrastructure through exposed API credentials and backend files stored on Antel servers. The threat actor alleges they were able to retrieve citizen data, access digital signatures, and potentially modify account-related information. The exposed data may include: • National identity numbers (CI/Cédula) • Full names and surnames • Dates of birth • Email addresses • Phone numbers • Residential addresses • Biometric validation status • Registration metadata • Digital signature information • Government authority references • Internal identifiers and account metadata • API keys and backend configuration data The post further claims that approximately 8GB of internal files were obtained, including: • Internal legal documents • Employee feedback • Technical infrastructure information • Small databases and backend files • API credentials related to TuID Digital services The threat actor also published screenshots allegedly showing API responses containing citizen records and metadata associated with public officials, cybersecurity personnel, journalists, and other individuals described as “persons of interest.” Notably, Uruguay’s digital identity ecosystem has previously been the subject of public cybersecurity concerns. In 2024 and 2025, local media and security researchers reported multiple incidents involving exposure of government systems, citizen data access issues, and debates surrounding AGESIC’s cyber governance framework. Recent reporting in Uruguay has increasingly focused on: • Government digital identity security • National cyber resilience • Public sector API exposure risks • Protection of citizen biometric and identity data • Oversight of AGESIC and related state systems If authentic, this incident could represent one of the most sensitive government-related data exposures reported in Uruguay due to the combination of identity records, digital signatures, and authentication infrastructure. Potential risks may include: • Identity theft • Government impersonation • Fraud involving digital signatures • Targeted phishing and extortion • Exposure of sensitive government personnel • Abuse of citizen authentication systems • Long-term trust erosion in digital identity platforms At the time of writing, there is no independent verification confirming the authenticity, scale, or full impact of the alleged breach. There has also been no public confirmation from Antel or Uruguayan authorities regarding the claims shown in the forum post. Status: Unverified — based on underground forum claims and publicly shared screenshots. #CyberSecurity #DataBreach #Uruguay #ThreatIntel #Government #IdentityTheft #Infosec #DigitalIdentity #Privacy #DarkWeb