Presunta filtración de datos de Digitel atribuida a Gatito_FBI_NZ

What this source supports

• Daily Dark Web reports a forum claim of about seven million 2025 Digitel records and an approximately 1 GB download
• the attached forum screenshot visibly attributes the post to Gatito_FBI_NZ, names Digitel, says approximately seven million, lists apparent table fields and shows a publisher-obscured sample
• the article and screenshot do not authenticate the sample, file, provenance, completeness, access or exfiltration

Evidence limits

Secondary publisher preserving a forum screenshot; its disclaimer says third-party claims may be unverified. No underlying file or independently authenticated sample was recovered.

Relevance to this case

Best public provenance for the alleged actor, target, date, approximate 7M count and advertised field structure.

What this source supports

• @DailyDarkWeb published that an unnamed actor claimed seven million Digitel records with names, phone numbers and emails from 2025
• the sole image is the same forum screenshot used by Daily Dark Web and visibly names Gatito_FBI_NZ
• the post is not independent of the article and does not authenticate the claim or data

Evidence limits

Same publisher and same captured artifact as the article; it repeats rather than independently corroborates the claim.

Relevance to this case

Exact social publication and timestamp for circulation of the claim.

What this source supports

• SOCRadar's current March 2025 table contains digitel.com.ve, size 3M, Venezuela, Telecommunications, post date 13 March and an asserted 1 January breach date
• the row lists apparent subscriber/account field names similar to the preserved forum screenshot
• the page supplies no underlying dataset, actor, sample, methodology or victim confirmation

Evidence limits

Vendor-curated dark-web table without artifact or methodology. Its 3M figure conflicts with the approximately 7M actor claim and 2,943,640 HEROIC index.

Relevance to this case

Independent live preservation of a target-specific table row and the material count discrepancy.

What this source supports

• the URL and pid preserve a pointer to the purported original forum thread
• the direct page did not expose thread text, author, date, attachment or sample
• Daily Dark Web independently preserves an apparent screenshot of the claimed forum post, but this exact destination could not be authenticated

Evidence limits

Inaccessible anonymous-forum pointer. It cannot independently support any incident claim.

Relevance to this case

Preserves the purported original URL while clearly recording that its content could not be checked directly.

What this source supports

• the article says a threat actor previously targeted Digitel through Medusa and demanded USD 5 million
• the article is about a separate February 2024 Smartmatic/electoral-system claim and does not support the March 2025 Digitel claim

Evidence limits

Context for the distinct 2024 Medusa episode only; no evidentiary value for the 2025 claim.

Relevance to this case

Useful solely to prevent conflating the 2025 claim with the prior Digitel/Medusa incident.

What this source supports

• CriptoNoticias reports the separate February 2024 Medusa ransom/data-publication incident involving Digitel
• the article predates and does not support the March 2025 Gatito_FBI_NZ claim

Evidence limits

Context for a distinct earlier incident; it must not be counted as corroboration of row 246.

Relevance to this case

Separates the well-reported 2024 Medusa episode from the March 2025 claim.

What this source supports

• HEROIC says it logged the Digitel claim on 13 March and later reports 2,943,640 unique records in its own index
• the page associates names, emails and mobile numbers and repeats the approximately seven million allegation
• the site does not expose its dataset or method and does not establish Digitel-system provenance or exfiltration

Evidence limits

Commercial index assertion without exposed methodology or records. Counts and page metadata conflict internally and with the other sources.

Relevance to this case

Only follow-up source claiming to have indexed records; supports an index assertion, not confirmed Digitel-origin data.