Presunta exposición de datos de BT Travel atribuida a malconguerra2

Qué respalda esta fuente

• malconguerra2 publicly attributed apparent BT Travel booking, agency, agent and customer samples to a new dataset
• the post claims 1 GB, 36,614 travel histories, 913 agencies, 1,294 agents and 56,879 customers
• the thread title says 90K while its component figures do not establish a single affected-person count

Límites de la evidencia

The public text contains apparent personal data, which is not reproduced in the audit, but no chain of custody or independent authentication ties it to BT Travel. The title, customer count and sum of component counts conflict.

Relación con el caso

Strongest direct provenance for the actor publication and apparent samples; not proof of intrusion, exfiltration, dataset ownership or total scope.

Qué respalda esta fuente

• CriptoNoticias reports the VECERT alert naming BT Travel and malconguerra2
• the article attributes 1 GB and several record counts to the alert and notes the absence of BT Travel confirmation

Límites de la evidencia

Secondary VECERT-dependent report; it does not authenticate the samples, counts or provenance and explicitly lacks a victim statement.

Relación con el caso

Best conventional report for the alert and its limitations, not independent technical confirmation.

Qué respalda esta fuente

• DiarioBitcoin repeats the VECERT-derived BT Travel claim and alleged counts
• the page identifies Hannah Pérez and discloses AI-assisted authorship

Límites de la evidencia

Derivative, AI-written report that uses stronger breach language and adds claims without independent technical validation.

Relación con el caso

Documents later circulation only; its generic images are not incident artifacts.

Qué respalda esta fuente

• VECERT publicly names BT Travel Solutions, malconguerra2, Venezuela and 16 March 2026
• the attached report image preserves a small apparent DarkForums capture

Límites de la evidencia

The post is threat-intelligence reporting derived from the actor claim; its locked report and small capture do not authenticate a dataset or prove compromise.

Relación con el caso

Strong public provenance for the earliest alert and named actor/victim/date, not independent incident confirmation.