Skip to content

ExpoEmpleo Database Allegedly Leaked, 192,280 Uruguayan Job Seekers With National ID Numbers Exposed

Breach Report Uruguay flagUruguay Employment / Recruitment Free Download

ExpoEmpleo Database Allegedly Leaked, 192,280 Uruguayan Job Seekers With National ID Numbers Exposed

A forum user posting as Sub21 has published what they describe as the database of ExpoEmpleo, a Uruguayan employment platform, covering registrations since around 2015. The release claims 192,280 user records in JSON Lines format, with per-field counts showing 189,781 DNI national identity numbers, 125,168 dates of birth, 127,912 addresses, and more than 250,000 phone numbers across two fields. Also present are marital status, department of residence, nationality, and linked Facebook, Twitter, and LinkedIn handles. In the posted sample the username field is the person's DNI number. The actor describes the set as a full identity package and released it free. The claim is unverified.

Users192,280
DNI numbers189,781
PriceFree
ActorSub21

Post details

TargetExpoEmpleo
CountryUruguay flagUruguay
SectorEmployment / Recruitment
ListingFree — reply or upgrade
Records192,280 users
RangeSince ~2015
Observed
ActorSub21

!Allegedly included

  • DNI identity numbers
  • Document type
  • Full names (both surnames)
  • Dates of birth
  • Email & alternate email
  • Phone & mobile numbers
  • Home addresses
  • Department of residence
  • Marital status
  • Country of birth
  • Facebook handles
  • LinkedIn handles
  • Twitter handles
  • Availability for work

Screenshot

Potential impact

DNI, full name, date of birth, and home address together are the identity, and none of it can be reissued after exposure. Because the username field carries the DNI, effectively every record includes one. At 192,280 people this represents over five percent of Uruguay's population, released free rather than sold. Job seekers are also a targeted population: recruitment fraud works on people expecting unsolicited contact about work, and the availability field marks who is actively looking. Birth dates in the sample indicate the set likely includes people who registered as minors. The claim is unverified.

iStatus

Unverified

The post includes per-field record counts and a sample, which is more substantiation than most listings offer, though the account is four days old with no standing. The actor credits another handle and attributes the breach to weak security on the platform. Neither the counts nor the data have been independently corroborated. The claim is unverified and ExpoEmpleo has not publicly addressed it.

Want everything on this breach? Paid subscribers get the full claim details and more. Check out the threat feed, then after subscribing, search there for this alert. View pricing →

DARK WEB INFORMER - THREAT INTELLIGENCE

Latest