1 hour ago
![[Image: grzBqS9.png]](https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Fi.imgur.com%2FgrzBqS9.png)
COLOMBIA - SIC (SIPI) - DATA LEAK
LEAKED BY: Zerttack
CREW: Atr0phyx 404
greetz: Y3rk404 ~ k1ll3rqzk ~ ndbull ~ Haizan404 ~ Valhomet404 ~ M1y4ku404 ~ Dfzma404 ~ X1no ~ Servidor Mother Fuckers
[ DESCRIPTION ]
Compromised the **SIPI (Sistema de Información de Permisos y Registros)** of the **Superintendencia de Industria y Comercio (SIC)** of Colombia. The portal manages and exposes information of natural and legal persons in the country.
Vulnerability: Critical IDOR (Insecure Direct Object Reference) in the "Gestión de Personas" search. We bypassed query restrictions and accessed the complete database.
Using an automation script (brute-force scraping), we performed thousands of sequential queries. The admin panel exposed full citizen profiles (Cédula, Names, Surnames, Gender, Emails, Phones, and Physical Addresses), including data that should not be public (such as personal emails and mobile numbers).
Access is still active and allows querying the complete database, which exceeds 2,000,000 records of Colombian citizens.
[ COMPROMISED DATA ]
TARGET: Gobierno de Colombia - SIC (SIPI)
Format: CSV (Full Database)
Total Records (Full DB): 2,000,000+
Free Sample: 18,894 records
Target Country: Colombia
[ DATA POINTS (PREMIUM) ]
- Full Identity: Cédula, Names, Surnames.
- Personal Details: Gender, Date of Birth.
- Contact Info: Emails, Phones, Mobile Numbers.
- Location: Full Physical Addresses.
► [ FOR SALE ] ◄
1. FULL CSV DATABASE (2,000,000+ Records)
Complete CSV file with all extracted records (Cédula, Names, Emails, Phones, Addresses).
2. ADMIN PANEL ACCESS
Direct access to the SIPI admin panel to query the live database in real-time.
[ FREE SAMPLE - 18,894 RECORDS (ID, NAME, ADDRESS ONLY) ]
NOTE: The free sample only contains ID, Name, and Address. The **Premium Access** (for sale on Telegram) gives you the **FULL PROFILE** including Emails, Phones, and Mobile Numbers.
[ SAMPLE PREVIEW - FREE CSV ]
53074846,ANA MARIA DEL PILAR LOZADA TELLEZ,Direccion Fisica : CARRERA 68 # 10A-86 BOGOTA D.C. (CO)
1118530272,NAIDA MARIA TUAY IZQUIERDO,Direccion Fisica : cra 22 # 7-58 YOPAL CASANARE 57 (CO)
43626075,ANA MARIA ABAD VALLEJO,Direccion Fisica : Calle 6 Sur # 43A -200 MEDELLIN ANTIOQUIA (CO)
16627519,JOSE MARIA ABADIA ARBELAEZ,Direccion Fisica : TRVS 33 C NO. 118 - 26 BLQ 2 OF. 613 BOGOTA D.C. (CO)
41359526,MARIA ROSALBA ACERO BAYONA,Direccion Fisica : Alto Verde Club House Torre 1 Apto 405 MELGAR TOLIMA (CO)[ PREMIUM SAMPLE - EXTRACTED FROM ADMIN PANEL ]
1159337,JUANA ROSA ABARCA CALDERON,Femenino,[email protected],997572556,997572556,"CALLE MIGUEL DASSO 153 5TO.PISO, LIMA, PERU (15073)"
71796787,JUAN MAURICIO ALVAREZ AMARILES,Masculino,[email protected],4796851,3508192249,"Carrera 43A #5A-113, MEDELLIN, ANTIOQUIA, CO"
1098757711,LUIS MIGUEL DIAZ,Masculino,[email protected],3176350678,3176350678,"CRA 27 CALLE 9, BUCARAMANGA, SANTANDER, CO"
70562128,JOSE RAMIRO ARENAS RAMIREZ,Masculino,[email protected],4889366,3017599903,"CR 42A # 1 - 135, MEDELLIN, ANTIOQUIA, CO"
1032371982,DIEGO ANDRES ADAMES PRADA,Masculino,[email protected],7436380,3174651702,"CARRERA 7 NO. 127-48 OFICINA 604, BOGOTÁ, D.C., CO"Data leaked by Zerttack (OWN OF - Atr0phyx 404 )
