Unknown actor puts a Conviasa (Venezuelan state-owned airline) database up for sale
In April 2026, a listing appeared on dark web forums offering a database attributed to Conviasa, Venezuela’s state-owned airline, described as data exfiltrated from the company (“DATABASE CONVIASA AIRLINES (VENEZUELA) 2026,” cited as having a volume of ~165 GB). ASEC’s (AhnLab) dark web trends report confirmed that Conviasa data was among that of several Venezuelan entities posted on clandestine forums during April 2026. The perpetrator was not publicly identified, nor was the scope of the breach officially confirmed by Conviasa.
Impact details
A public OSINT report indicates that an unverified actor claims to have carried out a 165 GB data exfiltration and gained access to Conviasa’s operating system, including PNR and customer data, SQL databases, internal reports, network topology, and the KIU/MAPAS-2 systems. No official confirmation has been found.
Classification & severity
- Category
- Information content security
- Subtype
- Leak of confidential information
- Confidence
- Medium
Severity assessment
High- Information impact
- Sensitive personal data
- Affected scope
- Organization-wide
- Critical service
- Potential
- Public confidence
- Moderate
The public complaint concerns passenger/customer data and the airline’s operating systems, but is based on an unconfirmed report from an individual or media outlet.
Timeline
A list offering a database attributed to Conviasa Airlines (Venezuela) from 2026 as exfiltrated data is published on dark web forums (DarkForums / monitoring channels).
The ASEC (AhnLab) dark web trends report confirms that Conviasa data was among that of Venezuelan entities (Movilnet, SEBIN, CICPC, CORPOELEC, SENIAT, PDVSA, among others) that appeared on clandestine forums in April 2026.