Leak of confidential information

malconguerra2 calls for the sale of Venezuela’s electronic tax stamp database

On July 3, 2026, the actor malconguerra2 posted an offer on an underground forum to sell a JSON repository attributed to the Venezuelan system for managing and issuing electronic tax stamps used by regional entities. The claim states that the dataset contains 1.5 GB and approximately 1.5 million records, including profiles of individual and corporate taxpayers, system operator data, password hashes, persistent tokens, bank references, and payment traceability for administrative procedures. No official confirmation or independent forensic validation has been found; this record documents the public claim and the associated risk, not a breach confirmed by an authority.

Overview

Missing evidence

official confirmationIndependent validation of the datasetinitial access vector

Impact details

1,500,000 Exposed records

The author and OSINT sources claim that a 1.5 GB JSON repository containing approximately 1.5 million tax collection records has been leaked, including personally identifiable information of taxpayers, profiles of legal entities, operator credentials, password hashes, refresh tokens, and bank transaction references. No official confirmation, forensic validation, or service disruption has been found.

full namesID numbersemailsphone numbersphysical addressesgeographic location codes

Classification & severity

Category
Information content security
Subtype
Leak of confidential information
Confidence
Medium

Public forum alerts and OSINT consistently describe an alleged exposure of confidential tax-stamp collection data. No official confirmation or independent forensic validation was found.

Severity assessment

High
Information impact
Government-sensitive
Affected scope
National
Critical service
Potential
Public confidence
Moderate

Public sources point to an alleged large-scale leak of government tax collection data involving personal information, credentials/tokens, and payment references. No official confirmation or forensic validation has been found.

Data exfiltration· Claimed Confidentiality

Timeline

No structured timeline events are available for this incident.

Evidence & sources

3 sources