Claim: Actor offers alleged DIRESA Loreto…

MediumBreachNo software to update

In 30 seconds

Alleged

A threat actor allegedly offered a database attributed to Peru's Loreto Regional Health Directorate, DIRESA Loreto, for sale. The only available report says the claim remains unverified, with no stated record count or official response.

What happened

Alleged

DailyDarkWeb reported a sales listing that purportedly contains details about regional health personnel, including full names, DNI national identification numbers, job roles, status records and brigade assignments. The evidence does not establish who created the listing or how any data was obtained.

Why it matters

Inferred

If the advertised records are genuine, combining identity numbers with roles and work assignments could make impersonation or targeted phishing against health workers more convincing. That risk is an assessment, not proof that anyone has used the alleged data maliciously.

What to do

Inferred

Potentially affected personnel should be cautious with unexpected messages that reference their role, DNI or brigade assignment, and verify requests through established DIRESA Loreto channels. This is a precaution based on the reported data fields, not evidence that phishing is already underway.

Confirmed and still uncertain

Observed

The available evidence shows that DailyDarkWeb published the claim and explicitly labeled it unverified. It provides no sample validation, record count, price, acquisition method, seller identity or confirmation from DIRESA Loreto.

What people are saying

Alleged

DailyDarkWeb says the listing concerns DIRESA Loreto and warns that names paired with DNI numbers and public-health roles could support impersonation and phishing. The account also notes that the database size was not stated and that no official statement was available at the time of its post.

Evolution

Observed

The evidence captures only the initial public report of the alleged sale. There is no later material in the supplied batch showing validation of the records, a response from the health directorate, removal of the listing or any subsequent use of the purported data.

Reach

Observed

1 independent groups, 1 updates, and 0 engagements.

Technical detail

Observed

The reported fields are structured identity and employment details: full names, DNI numbers, roles, status records and brigade links. No passwords, medical records, file format, database schema, timestamps or technical evidence of system access are described in the supplied report.

Sources and evidence

Observed

The evidence base consists of one X post from DailyDarkWeb summarizing an alleged sales listing and attaching an image. Because the batch contains neither the underlying dataset nor an official statement or independent corroboration, attribution to DIRESA Loreto and the authenticity of the advertised records remain unconfirmed.