TeamHDP (#LaListaJustin) breaches the Carnet de la Patria system, cancels memberships, and discloses data on officials and users

On May 6, 2017, the Venezuelan opposition hacker group TeamHDP, linked to the hashtag #LaListaJustin and the Twitter accounts @yosoyjustin (Yustin) and @ERHDP (Er Pingüino HDP), gained access to the Venezuelan government’s Carnet de la Patria system website. The attackers claimed that the intrusion was “extremely simple” and was motivated by a desire to expose Nicolás Maduro’s regime. They took screenshots of user profiles containing personal data (ID numbers, phone numbers, email addresses, Twitter accounts, home addresses, participation in PSUV events, and even whether the person had a pet), published information on high-ranking officials and Chavista leaders, and claimed to have penetrated and modified the database, “canceling” the officials’ affiliations with the system. Among those mentioned as affected were Nicolás Maduro, Cilia Flores, Diosdado Cabello, Delcy Rodríguez, Ernesto Villegas, Pedro Carreño, and Carmen Meléndez, as well as lists of officials from the PNB, CICPC, SEBIN, CONATEL, and the Ministry of Foreign Affairs. Later, when Maduro scanned his ID card on national television, the system displayed a message stating that the person did not exist or that the ID card had been invalidated. The attackers announced the release of more than 450 PDF files and over a thousand pages of conversations.