Leak of confidential information

malconguerra2 calls for an attack on QuoVadis

On March 17, 2026, a threat actor known as malconguerra2 claimed to have leaked 43,000 records of confidential data from QuoVadis, a Venezuelan travel and tourism agency, on the darkforums.su forum. The compromised data reportedly includes email addresses and reservation details containing fields such as id, date of inquiry, reservation, PNR, status, and airline.

Overview

Missing evidence

The full extent of the data breach and the specific contents of the leaked files are not fully detailed.

Impact details

43,000 Exposed records

23,362 Affected people

According to media reports citing VECERT, malconguerra2 reportedly pointed out a data breach at QuoVadis involving more than 43,000 records, including 23,362 customers and confidential travel and payment data. QuoVadis has not issued any official confirmation to the sources consulted.

passportsballotspayment historycredit card datatravel recordsaffiliate agent information

Classification & severity

Category
Information content security
Subtype
Leak of confidential information
Confidence
Medium

Severity assessment

High
Information impact
Sensitive personal data
Affected scope
Multiple users
Critical service
None
Public confidence
Moderate

The complaint concerns passport information, national ID information, travel information, payment history, and credit card information from a travel platform, but the victim has not yet confirmed this.

Data exfiltration· Claimed Confidentiality

Timeline

Claim

malconguerra2 listed QuoVadis as an alleged victim.

Evidence & sources

3 sources