Threat Actor Claims Massive Leak of 36 Million Venezuelan Citizen Records Including National Identity Data
A threat actor is claiming to have leaked personal data belonging to 36 million Venezuelan citizens, potentially encompassing the entire population of the country, according to a posting on a dark web forum observed by Zero Day Wire.
The forum post, published on January 27, 2026, advertises a database containing identity card numbers, full names, surnames, sex, marital status, and birthdates for over 36 million individuals. Venezuela's total population is estimated at approximately 28-30 million, suggesting the dataset may include historical records or deceased individuals if the claims are accurate.
Massive Dataset Offered for Sale
The threat actor, operating under the alias "malconguerra2," posted the listing with sample data showing sequential Venezuelan national identity card numbers (cédula de identidad) alongside corresponding personal information. The account holds VIP status on the forum and was created in January 2026 with a reputation score of 10.
According to the posting, the leaked database totals 450MB when compressed and is formatted as text files. A sample file named LOT1.TXT measuring 70.4MB is available to prospective buyers, with contact facilitated through Telegram.
The visible sample data shows identity card numbers in the V-001XXXXXX format ranging into the millions, indicating a comprehensive extraction from what appears to be a centralized government identity database.
National Identity System Potentially Compromised
Venezuela's cédula de identidad serves as the primary identification document for citizens and is required for voting, banking, government services, and most official transactions. A breach of this magnitude would expose the foundational identity data for virtually the entire Venezuelan population.
The exposed data fields create significant risk for identity fraud, social engineering attacks, and targeted scams. The combination of national ID numbers with full names, birthdates, sex, and marital status provides sufficient information for criminals to impersonate victims or bypass identity verification systems.
Source and Authenticity Unverified
The origin of the alleged breach has not been confirmed. It remains unclear whether the data was exfiltrated from a Venezuelan government database, a third-party service provider, or aggregated from multiple sources. The Venezuelan government has not publicly commented on the claimed leak.
Forum moderators have warned users to exercise caution when dealing with data sellers, noting an increase in scammers distributing samples from leaks and defrauding interested parties.
Zero Day Wire has not independently verified the authenticity or completeness of the claimed dataset. Organizations and individuals in Venezuela should monitor for potential misuse of personal information and remain vigilant against identity-related fraud.
