Actor 'dmitryy' claims leak of 1.7M Buenos Aires student enrollment records (ALUMNOS GBA)
A threat actor using the handle dmitryy claims to have published a dataset named ALUMNOS GBA, allegedly containing student enrollment information from the Province of Buenos Aires, Argentina for the 2025 academic year. The listing advertises roughly 1.7 million records aggregated from multiple educational institutions. Visible columns include DNI, CUIT, sex, first and last name, date of birth, academic year, education level, school name, institution type, address and CUE code. The listing references the Telegram group PampaLeaks. Dark Web Informer has not independently verified the authenticity, source, record count or current availability of the data.
Detalhes técnicos
The post presents a structured enrollment database, mapped analytically to T1213.006 (Data from Information Repositories: Databases). The supplied material does not disclose how the data was obtained and does not establish unauthorized access to Buenos Aires government systems. No malware hashes, Tox/Session IDs or attacker-controlled infrastructure were visible.
Remediação
If authentic, the exposure of minors' identity data creates elevated risk of identity fraud, targeted phishing, impersonation and harassment. Argentine education authorities should audit access logs of enrollment platforms and prepare notification procedures for affected families.
Linha do tempo
-
Actor 'dmitryy' claims leak of 1.7M Buenos Aires student enrollment records (ALUMNOS GBA)
ler a análise desta fonte ocultar
A threat actor using the handle dmitryy claims to have published a dataset named ALUMNOS GBA, allegedly containing student enrollment information from the Province of Buenos Aires, Argentina for the 2025 academic year. The listing advertises roughly 1.7 million records aggregated from multiple educational institutions. Visible columns include DNI, CUIT, sex, first and last name, date of birth, academic year, education level, school name, institution type, address and CUE code. The listing references the Telegram group PampaLeaks. Dark Web Informer has not independently verified the authenticity, source, record count or current availability of the data.
Technical Details
The post presents a structured enrollment database, mapped analytically to T1213.006 (Data from Information Repositories: Databases). The supplied material does not disclose how the data was obtained and does not establish unauthorized access to Buenos Aires government systems. No malware hashes, Tox/Session IDs or attacker-controlled infrastructure were visible.
Remediation
If authentic, the exposure of minors' identity data creates elevated risk of identity fraud, targeted phishing, impersonation and harassment. Argentine education authorities should audit access logs of enrollment platforms and prepare notification procedures for affected families.