Steeven retweetledi
🚨 CRITICAL CYBER THREAT ALERT: MASSIVE BIOMETRIC DATA EXFILTRATION – BANCO DE MACHALA (ECUADOR) 🇪🇨🏦👤🔓
A data leak of extreme severity affecting the Banco de Machala in Ecuador has been detected. The threat actor GondorPe claims to have breached the institution's biometric authentication system, gaining full access to the customer database and the image repository—which, according to the attacker, lacked adequate protection.
🏢 Affected Entity: Banco de Machala, Ecuador.
👤 Threat Actor: GondorPe
📂 Leak Volume: Over 100,000 biometric records and more than 2GB of information.
📅 Data Date: Information current as of May 1, 2026.
📊 Breach Scope (Biometric Data and PII)
The exposed information is of a critical nature, as it includes immutable physical identity elements:
Biometric Photographs: Full-face images of all customers.
Identity Documentation: Photographs of users' national ID cards.
Personally Identifiable Information (PII): Full names and national ID numbers.
Data Linkage: Facial photographs directly linked to each identification number.
Format: Image files in JPG format.
🛡️ Immediate Response Recommendations
🔒 Validation Module Audit: Banco de Machala must immediately review its identity validation module and the encryption of its image repositories to close the access gap.
🔑 Authentication Strengthening: Implement additional authentication factors that do not rely exclusively on facial biometrics, such as physical tokens or electronic signatures.
Monitor: analyzer.vecert.io
#CyberSecurity #Ecuador #BancoDeMachala #BiometricLeak #DataBreach #Machala #VECERT #InfoSec #Unverified 🇪🇨🛡️⚠️🚨👤
English
