Leak of confidential information

Alleged leak of 7 million Digitel Venezuela customer records on the dark web (March 2025)

On March 13, 2025, dark web intelligence sources (Daily Dark Web) reported that a threat actor claimed on a dark web forum to have leaked approximately 7 million records from the Venezuelan telecom operator Digitel, including customer names, phone numbers, email addresses, identification numbers, and account statements, with data dated 2025 and a database of about 1 GB. The post is associated with the actor’s alias “Gatito_FBI_NZ,” who is active on BreachForums with leaks in the region. This is an independently unverified claim and appears to be distinct from the 2024 Medusa ransomware attack against Digitel; Digitel has not publicly confirmed this incident, and reputable Venezuelan media outlets have not independently covered it.

Overview

Missing evidence

Official Statement from DigitelForensic confirmation of the source system and the access vectorIndependent validation of the claimant’s complete claim, comprising 7 million records

Impact details

2,943,640 Exposed records

Daily Dark Web reports that an actor has claimed approximately 7 million Digitel customer records from 2025, including names, phone numbers, email addresses, ID numbers, and account statuses. Subsequently, HEROIC recorded 2,943,640 records in its data breach index linked to digitel.com.ve, which included subscriber names, email addresses, and cell phone numbers. No statement from Digitel or forensic report regarding this matter has been found.

customer namesphone numbersemail addressesalleged ID numbersalleged account statementssubscriber profile identifiers

Classification & severity

Category
Information content security
Subtype
Leak of confidential information
Confidence
Medium

Severity assessment

High
Functional impact
None
Information impact
Personal data
Affected scope
National
Critical service
Potential
Public confidence
Moderate

The data breach has been made public, and HEROIC has indexed at least 2,943,640 records, with claims from affected parties exceeding 7 million records. Personal data from the telecommunications sector on this scale poses a high risk of fraud and social engineering, but there is no official confirmation of any service disruption.

Data exfiltration· Confirmed Confidentiality

Timeline

Claim

A threat actor (alias Gatito_FBI_NZ) claims on a dark web forum to have leaked approximately 7 million Digitel customer records.

Publication

Daily Dark Web published the claim on X and in a dedicated article, detailing the types of data and a database size of ~1 GB.

Evidence & sources

7 sources