26M+ Venezuelan Citizen Records Leaked

Data Breach Summary

On May 26, 2025, a significant data breach involving over 26 million records of Venezuelan citizens was announced on the dark web forum DarkForums.st by a hacker using the alias Cypher404x. The leak includes personally identifiable information (PII) such as national ID numbers, full names, dates of birth, gender, and marital status—posing serious threats to the privacy and identity security of millions of individuals.

Where and How?

The breach was identified during routine dark web surveillance, when a new thread titled “26,375,483 Venezuelan Data Available” was published by Cypher404x. The dataset, reportedly acquired from an unknown Venezuelan government or electoral source, was shared in plain CSV format, significantly increasing the risk of identity theft, fraud, and profiling.

Company Data Breach History

Although the exact system or organization responsible for the data is unconfirmed, similar leaks in previous years suggest it could originate from outdated national databases or compromised civil registry systems. Venezuela has experienced data exposure incidents before, often linked to weak cybersecurity frameworks within government infrastructure. This latest leak is potentially the largest exposure of Venezuelan citizen data to date.

Immediate Recommendations

Authorities and impacted institutions should urgently:

• Identify the source system or leak vector.
• Notify affected individuals and consider providing identity protection services.
• Strengthen data access controls and encryption policies.
• Audit current systems for additional vulnerabilities.

Breach Origin and Historical Context

Although the exact system or organization responsible for the data is unconfirmed, similar leaks in previous years suggest it could originate from outdated national databases or compromised civil registry systems. Venezuela has experienced data exposure incidents before, often linked to weak cybersecurity frameworks within government infrastructure. This latest leak is potentially the largest exposure of Venezuelan citizen data to date.

Immediate Recommendations

Authorities and impacted institutions should urgently:

• Identify the source system or leak vector.
• Notify affected individuals and consider providing identity protection services.
• Strengthen data access controls and encryption policies.
• Audit current systems for additional vulnerabilities.

What is InsecureWeb?

InsecureWeb is a Dark Web monitoring service that keeps track of recent data breaches and tracks their impact by monitoring the darkest places of the internet.

Our commitment lies in providing top-notch cybersecurity services to our clients. Through continuous monitoring of the dark web and advanced threat detection methodologies, we strive to identify potential breaches promptly, enabling swift response and mitigation efforts. With our state-of-the-art tools and expertise, we prioritize the confidentiality, integrity, and availability of our clients’ data.