Colombia
Government / Municipal
Data for Sale
Bogotá Mobility Secretariat Allegedly Breached, 5.6GB of Traffic Agent and Citation Data Listed for $500
A threat actor posting under the alias PescobarLegado, working with a group identified in the post as NyxarGroup, claims to have obtained internal data from the Secretaría Distrital de Movilidad de Bogotá, the mobility authority under the Bogotá Mayor's Office in Colombia. The listing describes roughly 5.6GB across PDF, XLSX, JPEG, and DOCX files, said to cover traffic citation imagery, civil traffic agent personnel records, CACTT scheduling, occupational fitness certificates, labor surcharge records, service orders, and duty rosters. Sample material posted alongside the listing appears to show identity documents, agent portrait photos, and completed citation forms. The asking price is $500. The claim is unverified.
Colombia▣Post details
Colombia!Allegedly included
- Traffic citation images
- Civil traffic agent details
- Social security & contracts
- Employment certificates
- Confidentiality agreements
- CACTT scheduling (Apr–Jul)
- Medical fitness certificates
- Labor surcharge records
- Service orders
- Scheduling rosters
◱Screenshots
⚠Potential impact
The material described here is unusually personal for a municipal transport dataset. Alongside citation records tied to members of the public, the listing claims to hold full personnel files for civil traffic agents, including national identity numbers, government email addresses, contracts, and occupational medical certificates. Health data of this kind carries heightened protection under Colombian data protection law and is rarely recoverable once exposed. Publishing agent photographs together with names, ID numbers, shift patterns, and assigned street posts is the more acute concern: it maps identifiable enforcement personnel to predictable times and locations, creating a direct risk of targeting, intimidation, or retaliation. Citation records also expose vehicle owners, plates, and addresses, which feed straightforwardly into impersonation and fraud. The claim is unverified.
iStatus
UnverifiedThe post is a sale listing with sample material attached and a Session address given for contact, promoted through the forum's escrow service. The seller account is newly established with minimal posting history. The claim is unverified, and the Bogotá Mayor's Office and Mobility Secretariat have not publicly addressed it.
DARK WEB INFORMER - THREAT INTELLIGENCE
