Argentina
Government
Student & Education Data
Leak Claim
Unverified
Buenos Aires Student Database Leak Claim Lists 1.7 Million Enrollment Records
Overview
An actor using the handle "dmitryy" claims to have released a database called ALUMNOS GBA, described as a structured dataset containing student enrollment information from the Province of Buenos Aires, Argentina, for the 2025 academic year.
The post advertises approximately 1.7 million records and says the dataset centralizes enrollment and school records from multiple educational institutions. The visible columns include DNI, CUIT, sex, first name, last name, date of birth, academic year, education level, school name, institution type, address and CUE. The dataset, its source, the claimed volume and current availability have not been independently verified.
Post details
ArgentinaWhat the post claims
- Approximately 1.7 million student records
- 2025 academic-year data
- DNI field included
- CUIT field included
- Sex field included
- First-name and last-name fields included
- Date-of-birth field included
- Academic-year field included
- Education-level field included
- School-name field included
- Institution-type field included
- School-address field included
- CUE institution code included
- Sample rows displayed
The visible sample contains student identity information and school-enrollment details. Individual student names, DNI/CUIT values, dates of birth, school names and addresses shown in the screenshot are not transcribed in this report.
Screenshots
IOCs & identifiers
Identifiers directly visible in the supplied material. These support correlation and do not independently verify the dataset claim.
| Type | Identifier | Source |
|---|---|---|
| Actor handle | dmitryy | Screenshot 1 |
| Group | PampaLeaks | Screenshot 1 |
| Named organization | Gobierno de la Provincia de Buenos Aires | Screenshot 1 |
The screenshot references PampaLeaks as a Telegram group and lists several member handles. Those names are not expanded here because they are not necessary to describe the exposed student dataset. No malware hash, Tox ID, Session ID, attacker-controlled domain or attacker-controlled IP address is visible in the supplied material.
Mapped techniques
Claimed identifies behavior explicitly described by the actor. Inferred identifies an analytical mapping supported by the supplied material. Neither label means the activity has been independently verified.
- Collection T1213.006 Data from Information Repositories: Databases Inferred The listing presents a structured student-enrollment database containing identity and school information. The supplied material does not disclose how the data was obtained or independently establish unauthorized access to Buenos Aires government systems.
Potential impact
If authentic, the claimed dataset could expose student names, national identifiers, dates of birth, sex, education level, school names and school addresses at very large scale. Because the sample visibly includes school-age students, the exposure could create heightened risks of identity fraud, targeted phishing, impersonation, harassment or other privacy-related abuse.
Status Unverified
Dark Web Informer has not independently verified the dataset's authenticity, source, completeness, approximate 1.7 million-record count, sample contents or current availability. The supplied screenshot documents the listing and visible sample rows, not independent confirmation of the underlying database.
