NewAI pentesting that proves every finding
INSECUREWEB

Data Breach News2 min read

Data Breach at CENTRITO.CO: ~22,948 User Records Exposed

By InsecureWeb Team

This report reflects observations of dark web activity. InsecureWeb makes no representations regarding the accuracy of this data.

Data Breach at CENTRITO.CO: ~22,948 User Records Exposed

Data Breach Overview
In September 2025, a fresh data dump appeared on DarkForums.st (user “privilege”) exposing 22,948 user records from CENTRITO.CO, a Colombian e‑commerce & digital services platform. Sensitive information including government ID numbers, personal identifiers, contact data, demographic fields, account metadata, and hardware identifiers were included.

This covers a wide range of personally identifiable information (PII), including full names, phone numbers, gender, government ID type & number (for example, Cédula de Ciudadanía, Cédula de Extranjería in Colombia), age, date of birth, hardware identifiers, contact (email, phone), referral and cart IDs, and timestamps of account creation/update.

About CENTRITO.CO
CENTRITO.CO is a digital marketplace and allied store platform in Colombia, offering e‑commerce and digital services. The platform handles customer accounts, store alliances, and tracks metadata like referrals, carts, subscriptions, etc.

Impact and Risks

This breach is significant for several reasons:

  1. Sensitive, Verified Government IDs: Exposure of actual government identification numbers increases risk of identity theft, impersonation, fraud, or other misuse.
  2. Full Names + Contact Info: With names, phone numbers, emails, DOBs, attackers can mount phishing, social engineering, or credential stuffing attacks.
  3. Hardware IDs / Metadata: These may aid tracking of users, linking of accounts, device fingerprinting, even cross‑site correlation.
  4. Legal & Regulatory Exposure: Given Colombian and international privacy laws, CENTRITO.CO may face legal liability, regulatory penalties, and loss of customer trust.
  5. Secondary Risks: Exposure of created / updated timestamps, cart and referrer IDs can be used in fraud or to manipulate loyalty/referral programs; hardware IDs might tie devices to multiple leaks, etc.

Recommendations for Users

If you are a user of CENTRITO.CO, or believe you may be included:

  • Change your account password immediately; if you use the same password elsewhere, change there too.
  • Enable any two‑factor authentication (2FA) option the service offers.
  • Monitor your accounts (financial, email, etc.) for suspicious activity (unexpected logins, communications).
  • If fraud prevention or identity protection services are available in Colombia, consider using them.
  • Be very cautious about phishing attempts—attackers may use the leaked personal data to design convincing phishing or impersonation attempts.

What is InsecureWeb?

InsecureWeb is a Dark Web monitoring service that keeps track of recent data breaches and tracks their impact by monitoring the darkest places of the internet.

Our commitment lies in providing top-notch cybersecurity services to our clients. Through continuous monitoring of the dark web and advanced threat detection methodologies, we strive to identify potential breaches promptly, enabling swift response and mitigation efforts. With our state-of-the-art tools and expertise, we prioritize the confidentiality, integrity, and availability of our clients’ data.

More breach reports