Skip to content
Tips? Soon

Threat Actor Claims to Sell 24 Million Confidential SENIAT Venezuela Tax Records, 30 GB

Breach Report Venezuela flagVenezuela Government

Threat Actor Claims to Sell 24 Million Confidential SENIAT Venezuela Tax Records, 30 GB

A threat actor using the alias malconguerra2 claims to be selling a 30 GB confidential dataset attributed to SENIAT, Venezuela's national tax and customs authority. The listing advertises roughly 24 million unique records in JSON covering legal entities, individuals, foreigners, passports, and government data, with a small free sample and a Telegram contact for buyers. The claim is unverified and SENIAT has not publicly addressed it.

Data24M records / 30 GB
PriceTelegram sale
CountryVenezuela flagVenezuela
Actormalconguerra2

Post details

TargetSENIAT (Servicio Nacional Integrado de Administración Aduanera y Tributaria)
CountryVenezuela flagVenezuela
SectorGovernment / Tax & Customs
ClaimConfidential dataset offered for sale
Data24M records, JSON, 30 GB
ObservedJun 1, 2026
PriceTelegram sale
Actormalconguerra2

!Allegedly exposed

  • ~24 million unique records (claimed)
  • Personal data of individuals (naturals)
  • Legal-entity / company records
  • Foreign nationals' records
  • Passport information
  • Tax IDs (RIF) and registration data
  • National ID / cédula holder data
  • Government-related taxpayer data
  • 23.6M CI-person JSON records
  • 30 GB total, JSON format

Screenshots

Potential impact

If genuine, the exposure of 24 million records from a national tax authority, including identity, passport, and tax-registration data for individuals, foreigners, and companies, could enable large-scale identity theft, fraud, and targeting across much of the taxpaying population. Aggregated government and entity data would also be valuable for follow-on attacks and social engineering. Listings of this scale are also frequently exaggerated, recycled, or partly fabricated.

iStatus

Unverified

A small sample file and JSON data excerpts were posted to an underground forum, with the full dataset behind a reply/upgrade paywall and a Telegram contact for buyers; the sample, links, and contact are not reproduced here. The claim has not been independently confirmed and SENIAT has not publicly addressed it. Large national-database listings are sometimes overstated or scams.

Want the non-redacted screenshots? Paid subscribers get all of the claim details and unredacted screenshots, check out the threat feed or ransomware feed. View pricing →

DARK WEB INFORMER - THREAT INTELLIGENCE

Latest