Colombia
Healthcare
PII & Health Data
Leak Claim
Unverified
Nueva EPS Data Leak Claim Exposes 29,018 Vaupés Records With Personal and Health Information
Overview
An actor using the handle "nuevaeps" claims to have leaked 29,018 records associated with Nueva EPS users in Vaupés, Colombia. Nueva EPS is described in the post as a major Colombian health insurer serving millions of members across the country's contributory and subsidized healthcare systems.
The screenshot shows a large field list spanning identity information, contact details, demographic data, healthcare affiliation, medical-history indicators, clinical measurements, screening and follow-up information. The actor also claims that a much larger dataset involving approximately 11 million additional records exists but says it does not intend to release the remainder. The authenticity, source, completeness and scope of the claimed data exposure have not been independently verified.
Post details
ColombiaWhat the post claims
- 29,018 Vaupés records leaked
- Approximately 11 million additional records claimed
- Names and identity-document fields listed
- Dates of birth, sex and age fields listed
- Phone, email and address fields listed
- Municipality and regional location fields listed
- Ethnicity and Indigenous-community related fields listed
- Occupation and employment-related fields listed
- Healthcare regime and affiliation-status fields listed
- Disability and health-condition fields listed
- Clinical measurement and screening fields listed
- Follow-up and care-history fields listed
- Hospitalization and appointment-related fields listed
- Actor says remaining dataset will not be released
The field list visible in the supplied material is unusually broad and includes both personally identifiable information and health-related data. Individual patient values are not transcribed in this report.
Screenshots
IOCs & contact identifiers
Identifiers directly visible or supported by the supplied material. These support correlation and do not independently verify the dataset claim.
| Type | Identifier | Source |
|---|---|---|
| Actor handle | nuevaeps | Screenshot 1 |
| Named organization domain | nuevaeps[.]com[.]co | Screenshot 1 |
The domain identifies the organization named in the claim, not malicious infrastructure. The source material includes a direct link to the purported leaked data; that link is intentionally not reproduced here. No Tox ID, Session ID, malware hash or attacker-controlled IP address is visible. Patient and member identifiers shown or referenced in the purported evidence are not included in this table. URLs to any data will always be blurred out, but are available for subscribers on the threat feed or ransomware feed.
Mapped techniques
Claimed identifies behavior explicitly described by the actor. Inferred identifies an analytical mapping supported by the supplied material. Neither label means the activity has been independently verified.
- Collection T1213.006 Data from Information Repositories: Databases Inferred The source material shows a large structured field set spanning identity, demographic, affiliation, clinical and follow-up information. It does not disclose the acquisition method or independently establish unauthorized access to Nueva EPS systems.
Potential impact
If authentic, the claimed exposure could be highly sensitive because it combines identity, contact, demographic and healthcare information. Such data could increase risks of targeted phishing, impersonation, identity fraud, discrimination, extortion or other abuse involving affected Nueva EPS members, especially where medical history or Indigenous-community information is involved.
Status Unverified
Dark Web Informer has not independently verified the authenticity, source, completeness or current availability of the purported dataset, the claimed 29,018-record Vaupés leak, or the actor's assertion that approximately 11 million additional records exist. The supplied screenshot documents the claim and visible field structure, not independent confirmation of the underlying data.
