Target

Plataforma Patria (Carnet de la Patria)

Government patria.org.ve

Incidents
5
High impact
3
First seen
May 6, 2017
Latest seen
Oct 14, 2025

Linked incidents

Leak of confidential information

HvcKMvsoneria33 reports an attack on the Venezuelan platform Patria

On October 13, 2025, a threat actor known as HvcKMvsoneria33 claimed to be selling 30 million records allegedly extracted from the Venezuelan platform Patria (patria.org.ve) on DarkForums. The dataset, reportedly an 11.4 GB CSV file priced at $500, is said to contain sensitive personal information, including identification numbers, email addresses, phone numbers, full names, and genders. The incident was corroborated by dark web intelligence reports, although no official statement from the Venezuelan government has been released confirming the breach.

HvcKMvsoneria33
Phishing

Cybercriminals in the Andes Use Phishing to Empty Accounts Linked to Banco de Venezuela and Sistema Patria

On March 28, 2025, reports citing the CICPC and authorities in Táchira described the dismantling of Los Ciberandinos, a gang that used phishing, mirror sites, fake profiles, and foreign WhatsApp numbers to obtain credentials and drain accounts associated with Banco de Venezuela and the Patria System/Platform. Sources describe a single criminal organization, a single investigation, and a common pattern of credential theft, transfers to third parties, currency conversion, and the purchase of goods. Banco de Venezuela and Patria remain platforms that were exploited or impersonated, not confirmed infrastructure breaches. More than 200 victims were reported, including the municipal governments of San Cristóbal and Jauregui; six people were arrested in total (including a minor); and an alleged leader has fled to Colombia.

Los Ciberandinos
service disruption claim

Anonymous Claims Responsibility for Attack on Plataforma Patria

Plataforma Patria was mentioned in reports from the #OpVenezuela/Cyber Hunters campaign. The evidence supports claims of an outage affecting patria.org.ve, but does not confirm that data was compromised or the duration of the outage.

Anonymous
Leak of confidential information

Group 'Sistem Fail' Claims Responsibility for Data Leak Affecting 90,000 Patria System Accounts

In May 2023, a group calling itself “Sistem Fail” (via the Twitter account @FailSistema) claimed to have obtained data from approximately 90,000 accounts on the Patria System, the Venezuelan government’s platform used as an e-wallet and for the distribution of state bonuses and subsidies. According to the group, a configuration error exposed more than 90,000 accounts to the internet and made them accessible to attackers. The compromised information reportedly included users’ home addresses, personal data, bank accounts, and vehicle information. As proof, the group published a video and screenshots of user accounts. The attack occurred amid wage protests in Venezuela and coincided with an attack on the Public Prosecutor’s Office website claimed by another group (The Binary Guardians).

TeamHDP
Leak of confidential information

TeamHDP (#LaListaJustin) breaches the Carnet de la Patria system, cancels memberships, and discloses data on officials and users

On May 6, 2017, the Venezuelan opposition hacker group TeamHDP, linked to the hashtag #LaListaJustin and the Twitter accounts @yosoyjustin (Yustin) and @ERHDP (Er Pingüino HDP), gained access to the Venezuelan government’s Carnet de la Patria system website. The attackers claimed that the intrusion was “extremely simple” and was motivated by a desire to expose Nicolás Maduro’s regime. They took screenshots of user profiles containing personal data (ID numbers, phone numbers, email addresses, Twitter accounts, home addresses, participation in PSUV events, and even whether the person had a pet), published information on high-ranking officials and Chavista leaders, and claimed to have penetrated and modified the database, “canceling” the officials’ affiliations with the system. Among those mentioned as affected were Nicolás Maduro, Cilia Flores, Diosdado Cabello, Delcy Rodríguez, Ernesto Villegas, Pedro Carreño, and Carmen Meléndez, as well as lists of officials from the PNB, CICPC, SEBIN, CONATEL, and the Ministry of Foreign Affairs. Later, when Maduro scanned his ID card on national television, the system displayed a message stating that the person did not exist or that the ID card had been invalidated. The attackers announced the release of more than 450 PDF files and over a thousand pages of conversations.

TeamHDP