Claim: actor sells alleged SEFIN portal…

MediumBreachNo software to update

In 30 seconds

Alleged

A threat actor is allegedly offering a database from a Honduran Finance Ministry, SEFIN, portal for USD 100. The claim remains unverified: SEFIN has not confirmed an incident, and no record count or dump size was disclosed.

What happened

Alleged

DailyDarkWeb reported that an unidentified actor advertised the purported database on a dark web forum. The post says a displayed sample resembles a taxpayer or registry table, but it does not establish that the information came from SEFIN.

Why it matters

Inferred

If the data is authentic, the combination of identity, contact and taxpayer details could make tax-themed phishing and identity fraud more convincing for both individuals and companies.

What to do

Inferred

Citizens and businesses should be cautious with unexpected tax or SEFIN-themed messages, particularly requests involving personal details, credentials or payments. Verify such requests through an independently obtained official contact channel rather than links or numbers in the message.

Confirmed and still uncertain

Observed

The known facts are limited to the existence of the public report and its description of the forum listing. The database's authenticity, origin, age, completeness, record count and total size remain unknown, as does whether any SEFIN system was accessed.

What people are saying

Observed

DailyDarkWeb explicitly called the claim unverified and said SEFIN had not confirmed an incident. Its analyst note characterized the purported sample as looking like a taxpayer or registry table.

Evolution

Observed

The visible chain begins with an alleged dark web forum sale and continues with DailyDarkWeb's public summary of the listing and sample. The reporting has not yet progressed to confirmation by SEFIN or independent validation of the database.

Reach

Observed

1 independent groups, 1 updates, and 0 engagements.

Technical detail

Alleged

According to the report, the sample displays taxpayer registry numbers known as RTNs, national identity numbers, names, phone numbers, email addresses, physical addresses and dates of birth. It also reportedly distinguishes individual and company entities, but these fields and their source have not been independently verified.

Sources and evidence

Observed

The evidence supplied consists of one DailyDarkWeb post describing a forum advertisement and an alleged sample image. It provides no SEFIN statement, independently examined database, record count or dump size, so it supports reporting the claim but not confirming a breach or attributing the data to SEFIN.