Threat actor claims leak of DIGECAM and USAC databases
A threat actor posted a 'Guatemala Attack DB' listing on an underground forum, claiming databases from DIGECAM, Guatemala's arms and ammunition control directorate, and USAC, the national public university. The listing mentions personal records but shows no record counts, field lists or sample rows, and neither institution has confirmed an incident. Treat as unverified and watch for official statements.
What happened
A threat actor on an underground forum claims to have extracted databases from DIGECAM, Guatemala's arms and ammunition control agency, and USAC, the national public university. The listing mentions personal records but shows no counts or samples. Neither institution has confirmed an incident.
Why it matters
If confirmed, a DIGECAM leak would expose firearm licence and owner records, carrying physical-security risk beyond identity fraud, per an analyst note. USAC data would add personal records from the university community. The posting account is about one month old and the data may be partial or recycled.
What to do
Treat the listing as an unverified claim. Monitor official statements from DIGECAM and USAC. If the company operates in Guatemala or works with these institutions, check for exposed employee and partner data.
For the technical team
- Affected
- Bases de dados atribuídas à DIGECAM, direção de controle de armas e munições da Guatemala, e à USAC (Universidad de San · Databases attributed to DIGECAM (Guatemala's directorate for arms and ammunition control) and USAC (Universidad de San Carlos de Guatemala).
- Exploitation
- Unverified claim posted on an underground forum and reported by DailyDarkWeb. No record counts, field lists or sample rows visible in the captured post. Neither institution has confirmed an incident.
- Fix
- Not applicable to a data leak; no fix cited in the sources.
- Vector
- Method not described. The actor claims an attack on Guatemalan websites exposed the databases of both public institutions.
- More details
- Listing titled 'Guatemala Attack DB'. The posting account is about one month old and frames the post as a hacktivist-style attack ('Guatemala has fallen'). Analyst note says DIGECAM data could expose firearm licence and owner records and the data may be partial or recycled.
Timeline
Incident opened.
Sources 1 source
- @DailyDarkWeb @DailyDarkWeb
