Leak of confidential information
GordonFreeman Claims Responsibility for Attack on SUVE Metro in Caracas
On February 27, 2026, a threat actor using the alias GordonFreeman claimed on DarkForums to be selling approximately 650,000 user records and transit card details attributed to the Caracas Metro’s SUVE system. A subsequent public source echoed the claim, but the authenticity and origin of the dataset remain unconfirmed.
Overview
Missing evidence
Official statement from Metro de Caracas or the operator SUVEIndependent validation of the alleged datasetOriginal forum/source material and technical vector
Impact details
Activists and social media sources allege that the personal information of approximately 650,000 SUVE/Caracas Metro users or transit card records was exposed. No victim statements, independent technical validation, or evidence of operational disruption was found.
Classification & severity
- Category
- Information content security
- Subtype
- Leak of confidential information
- Confidence
- Low
Severity assessment
- Information impact
- Suspected
- Critical service
- None
Data exfiltration· Claimed Confidentiality
Timeline
Claim
GordonFreeman listed SUVE Metro de Caracas as a suspected victim.