According to chatters in a dark web crime forum, a threat actor named Valerie has allegedly leaked the complete military database of Venezuela.
It is believed that the breach took place on July 30 and specifically targeted the Venezuela Military Website (ejercito.mil.ve).
Valerie believes that this act was a reaction to what she sees as a dictatorship and the controversial self-declaration of Nicolas Maduro as the “winner” of the 2024 Venezuelan presidential election.
The threat actor stated that they conducted the breach as a form of defiance against what they perceived as an attack on freedom and democracy. They also expressed their support for the Venezuelan people.
Valerie revealed that the breach occurred by taking advantage of multiple vulnerabilities on the military website.
One of these vulnerabilities allowed unauthorized access to the server's internal database, which contains sensitive information such as full names, emails, addresses, credentials, passwords, and other personal details of military and government employees.
It has been reported that the database contains a vast amount of records, potentially compromising the personal information of numerous individuals in the Venezuelan military and government sectors.
Details of the database
We were able to acquire a copy of the leaked database for verification purposes. The file is 82.8 MB in size and contains over a million records with dataset headers in Spanish.
These headers contain a wealth of personal and professional information when translated:
The dataset seems to be a thorough internal database of the Venezuelan Bolivarian Army, providing in-depth information about its personnel.
This data consists of user identifiers, roles, units, email addresses, names, registration dates, hashed passwords, and other personal information.
The leaked database appears to be utilized for the efficient management and organization of a diverse range of information within the army.
The folders found in the dataset cover a wide range of topics, including social groups, educational records, logistics, management, and operational details.
This type of data is organized in folders and, based on our understanding, it cannot be obtained through basic scraping methods and is not publicly available.
Although we have some confirmation about the legitimacy of this database, we are awaiting for an official statement from the Venezuelan government.