Posts

Showing posts with the label technology

Hacktivists open government doors but also expose personal data

Image
The government of Nayib Bukele in El Salvador does not like public scrutiny.  Since Bukele took office in 2019, access to government and public information has been sharply curtailed , and the dictates of the country's open records law largely ignored.  In particular, information about public spending is frequently hidden from public view.   Bukele also likes to tout the country as a technological innovator. It is clear, however, that the government has not always implemented sufficient cyber-security safeguards to prevent hackers from accessing data on government servers, and as a result the data that the government tries to hide is getting released anyways. Most recently, the "hacktivist" group calling itself " CiberInteligenciaSV " released payroll data leaked from the Salvadoran social security institute for 970,000 Salvadorans including government officials and virtually everyone else who has a job in the formal economy.  The data includes names, salaries, ...

The leaked personal information and photos of almost every Salvadoran

Image
Screenshot of leaked data Cyber-security experts have been evaluating the distribution on the dark web of the personal information of more than five million Salvadorans, including high resolution ID photos, names, addresses, and national identity (DUI) numbers.   The cybersecurity company Resecurity wrote : [T]his data leak is significant because it marks one of the first instances in cybercrime history where virtually the entire population of a country has been affected by a compromise of biometric data....Beyond the massive scale of Salvadorian PII records, threat actors also obtained a headshot of each victim, which represents a crucial biometric data marker – particularly in the golden age of generative AI. Notably, the vast scale of this biometric and PII data breach places most of El Salvador’s population at significant risk for identity theft and fraud. Armed with modern deep fake technology, threat actors can leverage victim headshots and related PII to stage more conv...