> ## Content Index > Fetch the complete content index at: https://darkwebinformer.com/llms.txt > Use this file to discover other available public pages before exploring further. # SENA Colombia Database Sale Claim Lists 20.56 Million Citizen Records With Identity, Contact and Employment Data - URL: https://darkwebinformer.com/sena-colombia-database-sale-claim-lists-20-56-million-citizen-records-with-identity-contact-and-employment-data/ - Published: 2026-11-04T16:11:10.000Z - Updated: 2026-11-04T16:11:10.000Z - Author: Dark Web Informer - Tags: Data Breaches Data Exposure Report ![Colombia flag](https://flagcdn.com/w20/co.png)Colombia Government Citizen & Employment Data For Sale Unverified ## SENA Colombia Database Sale Claim Lists 20.56 Million Citizen Records With Identity, Contact and Employment Data Claimed unique records20,564,434 CoverageColombia-wide FormatsJSONL + DB PriceNegotiable SeverityHIGH ### Overview An actor using the handle **"koii"** claims to be selling a database associated with Colombia's **Servicio Nacional de Aprendizaje (SENA)**. The post advertises **20,564,434 unique records** and describes the data as nationwide in scope. The listing says the dataset contains identity and demographic information alongside a broad professional and academic profile, including **names, document identifiers and types, dates of birth, addresses, phone numbers, email addresses, occupational profiles, academic history, work experience, training, languages, internships and driver's-license information**. The files are described as **JSONL and database formats**. **The dataset, its source, the stated record count and current availability have not been independently verified.** ### Post details OrganizationServicio Nacional de Aprendizaje (SENA) Country![Colombia flag](https://flagcdn.com/w20/co.png)Colombia SectorGovernment / vocational education and workforce development Actor"koii" Group namedPampaLeaks Claimed volume20,564,434 unique records FormatsJSONL and database Listing termsNegotiable price; BTC payment ### What the post claims - 20,564,434 unique records - Colombia-wide coverage - First and last names included - Document type and document number included - Date-of-birth field included - Address, municipality and department fields included - Primary and alternate phone numbers included - Email addresses included - Occupational-profile information included - Achievements / accomplishments included - Academic-history information included - Work-experience information included - Training / certifications included - Languages included - Business-internship information included - Driver's-license information included - JSONL and DB formats - Free sample advertised The screenshots show a database schema and sample records containing direct citizen identifiers and contact information. Those individual records, names, document numbers, birth dates, addresses, phone numbers and email addresses are not transcribed in this report. Sponsored [ ![WhiteIntel, dark web exposure monitoring](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/08/whiteintel_io_banner.jpg) ](https://whiteintel.io/?utm%5Fsource=darkwebinformer.com&utm%5Fmedium=referral&utm%5Fcampaign=whiteintel) ### Screenshots [ Screenshot 1Source screenshot ![Listing claiming a SENA Colombia database with more than 20.5 million citizen records and identity, contact, academic and professional fields](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/11/sena_colombia.png) ](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/11/sena%5Fcolombia.png) [ Screenshot 2Source screenshot ![Continuation of the SENA Colombia database-sale listing showing sample records, sale terms and actor contact identifiers](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/11/sena_colombia_2.png) ](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/11/sena%5Fcolombia%5F2.png) The supplied captures show the SENA database-sale claim, the advertised nationwide scope, schema fields, sample records, PampaLeaks attribution, negotiable pricing, BTC payment terms and actor contact identifiers. Personal citizen records shown in the samples are not reproduced here. ### IOCs & identifiers Identifiers directly visible in the supplied material. These support correlation and do not independently verify the dataset claim. | Type | Identifier | Source | | ------------ | ------------------------------------------------------------------ | --------------- | | Actor handle | koii | Screenshots 1–2 | | Group | PampaLeaks | Screenshots 1–2 | | Email | KOII337@proton.me | Screenshot 2 | | Session ID | 0532d3791d79cb78f3bcc82a4b3bb236d732d3096804d62a29cb8a045a3790811f | Screenshot 2 | | Telegram | @dinastiakoi | Screenshot 2 | No malware hash or attacker-controlled IP address is visible in the supplied screenshots. Citizen identifiers and personal data shown in the sample are intentionally not reproduced in this table. ### Mapped techniques **Claimed** identifies behavior explicitly described by the actor. **Inferred** identifies an analytical mapping supported by the supplied material. Neither label means the activity has been independently verified. - Collection [T1213.006](https://attack.mitre.org/techniques/T1213/006/) [Data from Information Repositories: Databases](https://attack.mitre.org/techniques/T1213/006/) Inferred The listing presents a large structured database containing identity, contact, academic, employment and professional-profile fields. The supplied material does not disclose how the data was obtained or independently establish unauthorized access to SENA systems. ### Potential impact If authentic, the claimed exposure could affect millions of individuals by exposing **national document identifiers, names, dates of birth, addresses, phone numbers, email addresses, academic history, work experience, training and professional-profile information**. The combination could support identity fraud, targeted phishing, impersonation, employment-related fraud or broad profiling of Colombian citizens. ### Status Unverified Dark Web Informer has **not independently verified** the dataset's authenticity, source, completeness, 20,564,434-record count, sample contents or current availability. The supplied screenshots document the listing and visible samples, not independent confirmation of the underlying database. Want everything on this threat? **Paid subscribers** get the full unredacted claim details and more. After subscribing, check out the [threat feed](https://darkwebinformer.com/threat-feed/?utm%5Fsource=alert&utm%5Fmedium=card&utm%5Fcampaign=sena-colombia-data-sale-2026-11-04&utm%5Fcontent=threat-feed) and search there for this alert. [View pricing →](https://darkwebinformer.com/pricing?utm%5Fsource=alert&utm%5Fmedium=card&utm%5Fcampaign=sena-colombia-data-sale-2026-11-04&utm%5Fcontent=pricing-button) [Dark Web Informer](https://darkwebinformer.com/?utm%5Fsource=alert&utm%5Fmedium=card&utm%5Fcampaign=sena-colombia-data-sale-2026-11-04&utm%5Fcontent=footer)