A recent cybersecurity breach has left over 5 million Salvadorans at risk after their personally identifiable information was leaked and made available for free download on the dark web. The hacker responsible for the breach claimed that this is the largest data breach in the history of El Salvador.
The stolen information includes sensitive details such as full names, birthdays, phone numbers, residential addresses, email addresses, and DUI numbers, which are the equivalent of social security numbers in El Salvador. Additionally, millions of high-definition, unwatermarked headshot photos of Salvadorans were also included in the breach.
The impact of this breach is far-reaching, affecting the vast majority of Salvadoran adults. With a population of approximately 6.6 million people, including a significant diaspora living abroad, the breach has put a large number of individuals at risk of identity theft and other cybercrimes.
The massive 144GB data leak was initially available for download for a fee of $250 since August. However, the threat actor behind the breach claimed that the victims failed to meet his ransom demand, prompting him to release the data for free as a form of punishment.
La Prensa Gráfica, a Spanish-language newspaper based in El Salvador, has confirmed the authenticity of the breach, further solidifying the severity of the situation for Salvadoran citizens. The exposure of personal information on such a large scale poses a significant threat to the privacy and security of those affected.
In the midst of this data breach, El Salvador is facing new risks that have replaced traditional forms of violence in the country. Under the leadership of President Nayib Bukele, authoritarian tactics have been employed to address issues such as gang violence, including the extrajudicial imprisonment of a portion of the adult male population.
President Bukele has also implemented controversial policies, such as the country’s adoption of bitcoin as legal tender, without proper consultation with the Salvadoran people. Furthermore, the involvement of companies like iFinex and its subsidiaries in El Salvador’s financial operations has raised concerns about the influence of external entities on the country’s economic policies.
As El Salvador grapples with the aftermath of this massive data breach and faces challenges related to governance and cybersecurity, the need for enhanced security measures and privacy protection has become more critical than ever. The breach serves as a stark reminder of the vulnerabilities inherent in the digital age and the importance of safeguarding personal information in an increasingly interconnected world.