Threat Actor Alleges Leak of 1.7 Million Buenos Aires Student Records
A threat actor group has posted on a cybercrime forum what it claims is a database of about 1.7 million enrollment records from the Province of Buenos Aires school system for the 2025 school year. The claim is unverified and there is no official statement. The alleged dataset includes DNI, CUIT, full names, dates of birth, sex and school details; institutions should monitor for confirmation and treat the data as potentially exposed.
What happened
A threat actor group has posted on a cybercrime forum what it claims is a database of about 1.7 million enrollment records from the Province of Buenos Aires school system for the 2025 school year. The claim is unconfirmed and there is no official statement.
Why it matters
The alleged data includes national ID (DNI) and tax ID (CUIT) numbers, full names, dates of birth and sex, plus school name, code and address. According to the analyst note, most people in the dataset are children, and ID numbers issued in childhood are rarely changed, so fraud risk can follow them for years.
What to do
Treat the data as potentially exposed, monitor for confirmations and official statements, and strengthen identity checks and alerts for misuse of minors' DNI and CUIT numbers.
For the technical team
- Affected
- Base de dados de estudantes de Buenos Aires (Argentina); alegação de 1,7 milhão de registros de matrícula · Province of Buenos Aires school system (Argentina), 2025 school year; the claim does not identify a specific institution.
- Exploitation
- Unverified threat actor claim reported by @DarkWebInformer and @DailyDarkWeb; no victim confirmation and no official statement.
- Fix
- Not applicable (data breach).
- Vector
- Method of obtaining not described in the sources; the item is a cybercrime forum post claiming possession of the database.
- More details
- Fields in the alleged lot: DNI, CUIT, full names, dates of birth, sex, school year, education level, school name, code and address. The data is claimed to span schools across the province. Analyst note: most people in the dataset are children and IDs issued in childhood are rarely changed, enabling long-lasting fraud. No official statement so far.
Timeline
New post details the alleged dataset fields: national ID (DNI), tax ID (CUIT), full names, dates of birth and sex, plus education level, school name and code, covering the 2025 school year.
First report of the case: claim of a leak of 1.7 million Buenos Aires student enrollment records.
Sources 2 sources
- @DarkWebInformer @DarkWebInformer
- @DailyDarkWeb @DailyDarkWeb
