Actor claims leak of 100,000 records from Peru's CHAVIMOCHIC
A threat actor on a dark web forum claims to have published a database from Proyecto Especial CHAVIMOCHIC (PECH), the La Libertad regional government's irrigation and hydraulic infrastructure project that supplies water to Trujillo, Peru. The actor alleges more than 100,000 records with personal data and contact information were exfiltrated. The claim has not been confirmed by the agency.
What happened
A threat actor on a dark web forum claims to have published a database belonging to Proyecto Especial CHAVIMOCHIC (PECH), the La Libertad regional government's irrigation and water infrastructure project in Peru. The actor claims more than 100,000 records with personal data and contact information were exfiltrated. The agency has not confirmed the leak.
Why it matters
If confirmed, staff, contractor, landholder and procurement records could be exposed, enabling targeted phishing and fraud against people linked to the project. PECH runs dams, canals and water supply for one of Peru's largest agricultural regions and also supplies water to Trujillo. The claim is unverified and the poster is a new forum account.
What to do
Monitor dark web channels for data samples and new claims against PECH. Warn staff and contractors about phishing attempts that use real data. Have the security team check for anomalous access and the integrity of agency databases.
For the technical team
- Affected
- Gobierno Regional de La Libertad Proyecto Especial CHAVIMOCHIC (PECH), projeto de irrigação e infraestrutura hídrica do governo regional de La Libertad, · Proyecto Especial CHAVIMOCHIC (PECH), La Libertad regional government, Peru (database allegedly exfiltrated).
- Exploitation
- Leak claim posted on a dark web forum and reported by DailyDarkWeb. No sample rows or field list visible in the post; claim not independently verified.
- Fix
- No fix applicable; this is an alleged data leak.
- Vector
- Not described in the sources. The actor claims exfiltration of an agency database; the forum post does not detail the access method or fields.
- More details
- The forum post shows only the thread title ('DATABASE PROYECTO CHAVIMOCHIC GOB[.]PE') and a skull banner. The poster is a new forum account. DailyDarkWeb notes Peruvian public bodies are frequent targets of leak claims. PECH also supplies water to the city of Trujillo.
Timeline
Incident opened.
Sources 1 source
- @DailyDarkWeb @DailyDarkWeb



