07-05-26, 05:42 AM
TuID Digital is a platform operated by Antel (the state-owned internet and telephone provider) designed to allow Uruguayan citizens to complete administrative procedures without having to visit government offices in person. The government promotes this as a “highly secure” system, even requiring two-factor authentication or biometric security. For the past few months, we’ve had access to view the data of any citizen with a “TuID Digital” account using the API and a private key. With this, in addition to viewing user data, we could change passwords or settings, effectively gaining control over the digital identities of hundreds of thousands of Uruguayans.
The API key was stored alongside a large number of internal files on ANTEL’s server backend. We collected the data by making thousands of requests and also downloaded 8 GB of internal files. Today we will publish samples of information regarding PERSONS OF INTEREST in Uruguay, along with the 8 GB of files and the API key. (The complete database created from the data extraction will not be included in the leak.)
![[Image: fuimba.png]](https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Fexternal-content.duckduckgo.com%2Fiu%2F%3Fu%3Dhttps%3A%2F%2Fi.ibb.co%2F6c6CTHbj%2Ffuimba.png)
![[Image: imagen.png]](https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Fi.ibb.co%2FWp4BCwTg%2Fimagen.png)
![[Image: traping.png]](https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Fi.ibb.co%2Fxqc2hXMG%2Ftraping.png)
![[Image: arribalospinguionos.png]](https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Fi.ibb.co%2FtpyhTQmc%2Farribalospinguionos.png)
![[Image: inmosonmio.png]](https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Fi.ibb.co%2F84D2SzFD%2Finmosonmio.png)
The API key was stored alongside a large number of internal files on ANTEL’s server backend. We collected the data by making thousands of requests and also downloaded 8 GB of internal files. Today we will publish samples of information regarding PERSONS OF INTEREST in Uruguay, along with the 8 GB of files and the API key. (The complete database created from the data extraction will not be included in the leak.)
Details of the Data breach [ANTEL TUID]: CI [Cedula de identidad], Names, Last name, Email address, Phone Number, Latest update, fullName, birthDate, serialNumber, docType, validatedMail, validatedCellphone, Security Level , validationBiometric ,created ,modified ,idSignIdentityTx ,registrationOfficer ,revokedDate ,address ,cityContractSign ,location ,identificationExpires, departmentDto, registrationAuthority, signIdentityLegalPersonDto, signIdentityEnterpriseDto, hasAcceptedCertificates, hasActivePFCert, certIssuanceMode
Details of the Data breach [ANTEL Internal Files]: Proposals, Employee feedback, Legal documents, technological infrastructure works, small databases, Portabilidad numerica, Docs on Antel's backend and frontend, TuID Digital API keys
[sample] API response containing the user's data (standard endpoint):
PHP Code:
{"success":true,"ci":"UY_CI_33568530","nombres":"EDUARDO","apellidos":"PREVE COCCO","correo":"[email protected]","telefono":"+59892232222","fecha_actualizacion":"24\/09\/2024 22:08:33","fullName":"EDUARDO MARTÍN PREVE COCCO","middleName":"MARTÍN","birthDate":"01\/09\/1973","serialNumber":"UY_CI_33568530","docType":{"code":"DNI","name":"Cédula","desc":"Documento nacional"},"validatedMail":true,"validatedCellphone":false,"country":{"code":"UY","name":"Uruguay","prefix":"+598","freeTransit":false,"minPhoneLength":8,"maxPhoneLength":9,"phonePattern":"^(0?[9])[1-9]{1}[0-9]{6}$|^$","isoAlpha3":"URY"},"state":{"code":"ACTIVE","name":"Activo","desc":"Usuario activo"},"levelRid":{"code":1,"name":"Nivel 1","desc":"En línea"},"validationBiometric":false,"hasActivePFCert":false,"created":"24\/09\/2024 22:07:33","actualizado_bd":false,"datos_para_actualizar":{"nombre":"EDUARDO","apellidos":"PREVE COCCO","fecha_nacimiento":"1973-09-01","genero":null}}
{"success":true,"ci":"UY_CI_36453908","nombres":"MARTÍN","apellidos":"PECOY TAQUE","correo":"[email protected]","telefono":"+59899256036","fecha_actualizacion":"08\/10\/2025 18:36:14","fullName":"MARTÍN null PECOY TAQUE","middleName":"","birthDate":"17\/09\/1980","serialNumber":"UY_CI_36453908","docType":{"code":"DNI","name":"Cédula","desc":"Documento nacional"},"validatedMail":true,"validatedCellphone":true,"country":{"code":"UY","name":"Uruguay","prefix":"+598","freeTransit":false,"minPhoneLength":8,"maxPhoneLength":9,"phonePattern":"^(0?[9])[1-9]{1}[0-9]{6}$|^$","isoAlpha3":"URY"},"state":{"code":"ACTIVE","name":"Activo","desc":"Usuario activo"},"levelRid":{"code":1,"name":"Nivel 1","desc":"En línea"},"validationBiometric":true,"hasActivePFCert":false,"created":"12\/04\/2021 19:57:39","actualizado_bd":false,"datos_para_actualizar":{"nombre":"MARTÍN","apellidos":"PECOY TAQUE","fecha_nacimiento":"1980-09-17","genero":null}}
{"success":true,"ci":"UY_CI_42616144","nombres":"AGUSTINA","apellidos":"PEREZ COMENALE","correo":"[email protected]","telefono":"+59894163077","fecha_actualizacion":"09\/11\/2023 18:00:07","fullName":"AGUSTINA DANIELLE PEREZ COMENALE","middleName":"DANIELLE","birthDate":"25\/12\/1988","serialNumber":"UY_CI_42616144","docType":{"code":"DNI","name":"Cédula","desc":"Documento nacional"},"validatedMail":false,"validatedCellphone":false,"country":{"code":"UY","name":"Uruguay","prefix":"+598","freeTransit":false,"minPhoneLength":8,"maxPhoneLength":9,"phonePattern":"^(0?[9])[1-9]{1}[0-9]{6}$|^$","isoAlpha3":"URY"},"state":{"code":"ACTIVE","name":"Activo","desc":"Usuario activo"},"levelRid":{"code":3,"name":"Nivel 3","desc":"Presencial con biometría"},"validationBiometric":false,"hasActivePFCert":false,"created":"05\/09\/2023 17:53:36","actualizado_bd":false,"datos_para_actualizar":{"nombre":"AGUSTINA","apellidos":"PEREZ COMENALE","fecha_nacimiento":"1988-12-25","genero":null}}
{"success":true,"ci":"UY_CI_13012507","nombres":"GRACIELA","apellidos":"BIANCHI POLI","correo":"[email protected]","telefono":"+59899196902","fecha_actualizacion":"02\/04\/2021 21:52:06","fullName":"GRACIELA ELENA BIANCHI POLI","middleName":"ELENA","birthDate":"14\/11\/1953","serialNumber":"UY_CI_13012507","docType":{"code":"DNI","name":"Cédula","desc":"Documento nacional"},"validatedMail":true,"validatedCellphone":true,"country":{"code":"UY","name":"Uruguay","prefix":"+598","freeTransit":false,"minPhoneLength":8,"maxPhoneLength":9,"phonePattern":"^(0?[9])[1-9]{1}[0-9]{6}$|^$","isoAlpha3":"URY"},"state":{"code":"ACTIVE","name":"Activo","desc":"Usuario activo"},"levelRid":{"code":1,"name":"Nivel 1","desc":"En línea"},"validationBiometric":false,"hasActivePFCert":false,"created":"02\/04\/2021 21:30:29","actualizado_bd":false,"datos_para_actualizar":{"nombre":"GRACIELA","apellidos":"BIANCHI POLI","fecha_nacimiento":"1953-11-14","genero":null}}
{"success":true,"ci":"UY_CI_34444098","nombres":"PAULO","apellidos":"ROCHA MARTINEZ","correo":"[email protected]","telefono":"+59899336548","fecha_actualizacion":"18\/08\/2025 16:40:50","fullName":"PAULO DANILO ROCHA MARTINEZ","middleName":"DANILO","birthDate":"25\/01\/1979","serialNumber":"UY_CI_34444098","docType":{"code":"DNI","name":"Cédula","desc":"Documento nacional"},"validatedMail":true,"validatedCellphone":false,"country":{"code":"UY","name":"Uruguay","prefix":"+598","freeTransit":false,"minPhoneLength":8,"maxPhoneLength":9,"phonePattern":"^(0?[9])[1-9]{1}[0-9]{6}$|^$","isoAlpha3":"URY"},"state":{"code":"ACTIVE","name":"Activo","desc":"Usuario activo"},"levelRid":{"code":3,"name":"Nivel 3","desc":"Presencial con biometría"},"validationBiometric":false,"hasActivePFCert":true,"created":"21\/01\/2021 00:14:07","actualizado_bd":false,"datos_para_actualizar":{"nombre":"PAULO","apellidos":"ROCHA MARTINEZ","fecha_nacimiento":"1979-01-25","genero":null}}
{"success":true,"ci":"UY_CI_51860867","nombres":"CHRISTIAN","apellidos":"ALCAIDE TRIAS","correo":"[email protected]","telefono":"+59899430290","fecha_actualizacion":"20\/10\/2025 17:49:57","fullName":"CHRISTIAN null ALCAIDE TRIAS","middleName":"","birthDate":"07\/05\/2001","serialNumber":"UY_CI_51860867","docType":{"code":"DNI","name":"Cédula","desc":"Documento nacional"},"validatedMail":false,"validatedCellphone":false,"country":{"code":"UY","name":"Uruguay","prefix":"+598","freeTransit":false,"minPhoneLength":8,"maxPhoneLength":9,"phonePattern":"^(0?[9])[1-9]{1}[0-9]{6}$|^$","isoAlpha3":"URY"},"state":{"code":"ACTIVE","name":"Activo","desc":"Usuario activo"},"levelRid":{"code":3,"name":"Nivel 3","desc":"Presencial con biometría"},"validationBiometric":false,"hasActivePFCert":false,"created":"20\/10\/2025 17:47:28","actualizado_bd":false,"datos_para_actualizar":{"nombre":"CHRISTIAN","apellidos":"ALCAIDE TRIAS","fecha_nacimiento":"2001-05-07","genero":null}}
{"success":true,"ci":"UY_CI_41801815","nombres":"OSCAR","apellidos":"PÉREZ SUÁREZ","correo":"[email protected]","telefono":"+59899811881","fecha_actualizacion":"25\/06\/2022 15:38:38","fullName":"OSCAR JAVIER PÉREZ SUÁREZ","middleName":"JAVIER","birthDate":"19\/11\/1983","serialNumber":"UY_CI_41801815","docType":{"code":"DNI","name":"Cédula","desc":"Documento nacional"},"validatedMail":true,"validatedCellphone":true,"country":{"code":"UY","name":"Uruguay","prefix":"+598","freeTransit":false,"minPhoneLength":8,"maxPhoneLength":9,"phonePattern":"^(0?[9])[1-9]{1}[0-9]{6}$|^$","isoAlpha3":"URY"},"state":{"code":"ACTIVE","name":"Activo","desc":"Usuario activo"},"levelRid":{"code":1,"name":"Nivel 1","desc":"En línea"},"validationBiometric":false,"hasActivePFCert":false,"created":"28\/03\/2022 18:54:59","actualizado_bd":false,"datos_para_actualizar":{"nombre":"OSCAR","apellidos":"PÉREZ SUÁREZ","fecha_nacimiento":"1983-11-19","genero":null}}
{"success":true,"ci":"UY_CI_38581414","nombres":"HUGO","apellidos":"IMAS CHARLÍN","correo":"[email protected]","telefono":"+59898643856","fecha_actualizacion":"03\/07\/2021 01:14:46","fullName":"HUGO DARIO IMAS CHARLÍN","middleName":"DARIO","birthDate":"26\/11\/1975","serialNumber":"UY_CI_38581414","docType":{"code":"DNI","name":"Cédula","desc":"Documento nacional"},"validatedMail":true,"validatedCellphone":false,"country":{"code":"UY","name":"Uruguay","prefix":"+598","freeTransit":false,"minPhoneLength":8,"maxPhoneLength":9,"phonePattern":"^(0?[9])[1-9]{1}[0-9]{6}$|^$","isoAlpha3":"URY"},"state":{"code":"ACTIVE","name":"Activo","desc":"Usuario activo"},"levelRid":{"code":1,"name":"Nivel 1","desc":"En línea"},"validationBiometric":false,"hasActivePFCert":false,"created":"03\/07\/2021 00:54:35","actualizado_bd":false,"datos_para_actualizar":{"nombre":"HUGO","apellidos":"IMAS CHARLÍN","fecha_nacimiento":"1975-11-26","genero":null}}
{"success":true,"ci":"UY_CI_43016074","nombres":"JUAN","apellidos":"DE MARCO KAYEL","correo":"[email protected]","telefono":"+59899123694","fecha_actualizacion":"15\/06\/2020 19:52:50","fullName":"JUAN PABLO DE MARCO KAYEL","middleName":"PABLO","birthDate":"03\/05\/1990","serialNumber":"UY_CI_43016074","docType":{"code":"DNI","name":"Cédula","desc":"Documento nacional"},"validatedMail":true,"validatedCellphone":false,"country":{"code":"UY","name":"Uruguay","prefix":"+598","freeTransit":false,"minPhoneLength":8,"maxPhoneLength":9,"phonePattern":"^(0?[9])[1-9]{1}[0-9]{6}$|^$","isoAlpha3":"URY"},"state":{"code":"ACTIVE","name":"Activo","desc":"Usuario activo"},"levelRid":{"code":1,"name":"Nivel 1","desc":"En línea"},"validationBiometric":false,"hasActivePFCert":false,"created":"15\/06\/2020 19:51:11","actualizado_bd":false,"datos_para_actualizar":{"nombre":"JUAN","apellidos":"DE MARCO KAYEL","fecha_nacimiento":"1990-05-03","genero":null}}
{"success":true,"ci":"UY_CI_12705004","nombres":"MIGUEL","apellidos":"BRECHNER FREY","correo":"[email protected]","telefono":"+59898447519","fecha_actualizacion":"22\/12\/2024 18:12:26","fullName":"MIGUEL null BRECHNER FREY","middleName":"","birthDate":"05\/01\/1953","serialNumber":"UY_CI_12705004","docType":{"code":"DNI","name":"Cédula","desc":"Documento nacional"},"validatedMail":false,"validatedCellphone":false,"country":{"code":"UY","name":"Uruguay","prefix":"+598","freeTransit":false,"minPhoneLength":8,"maxPhoneLength":9,"phonePattern":"^(0?[9])[1-9]{1}[0-9]{6}$|^$","isoAlpha3":"URY"},"state":{"code":"ACTIVE","name":"Activo","desc":"Usuario activo"},"levelRid":{"code":3,"name":"Nivel 3","desc":"Presencial con biometría"},"validationBiometric":false,"hasActivePFCert":true,"created":"03\/07\/2023 13:47:05","actualizado_bd":false,"datos_para_actualizar":{"nombre":"MIGUEL","apellidos":"BRECHNER FREY","fecha_nacimiento":"1953-01-05","genero":null}}
{"success":true,"ci":"UY_CI_26131897","nombres":"MAURICIO","apellidos":"PAPALEO MAYADA","correo":"[email protected]","telefono":"+59899116391","fecha_actualizacion":"11\/09\/2025 16:36:05","fullName":"MAURICIO DANIEL PAPALEO MAYADA","middleName":"DANIEL","birthDate":"16\/08\/1969","serialNumber":"UY_CI_26131897","docType":{"code":"DNI","name":"Cédula","desc":"Documento nacional"},"validatedMail":false,"validatedCellphone":false,"country":{"code":"UY","name":"Uruguay","prefix":"+598","freeTransit":false,"minPhoneLength":8,"maxPhoneLength":9,"phonePattern":"^(0?[9])[1-9]{1}[0-9]{6}$|^$","isoAlpha3":"URY"},"state":{"code":"ACTIVE","name":"Activo","desc":"Usuario activo"},"levelRid":{"code":3,"name":"Nivel 3","desc":"Presencial con biometría"},"validationBiometric":true,"hasActivePFCert":false,"created":"21\/12\/2023 01:32:10","actualizado_bd":false,"datos_para_actualizar":{"nombre":"MAURICIO","apellidos":"PAPALEO MAYADA","fecha_nacimiento":"1969-08-16","genero":null}}
View the history of transactions and digital signatures in TUID Digital: Citizens use this software to complete administrative procedures and sign documents digitally. That signature is confidential—but NOT TO US—so we can view the digital signature of any TUid Digital user who has ever completed an online procedure. In addition to this, there is also the metadata and the data sent by the user to the Antel server.
Remember when we mentioned the “persons of interest” earlier? Here’s a list of key figures in Uruguay and PEOPLE WHO ARE TALKING ABOUT US OR INVESTIGATING US, such as the director of the Uruguayan police’s cybercrime unit. The most powerful person there is PAULO ROCHA MARTÍNEZ, a man who, last year, unable to find a way to track us down and arrest us, had an 18-year-old boy who had nothing to do with me framed and arrested. A few months ago, when we carried out a massive leak of Uruguayan government data, the deception was exposed, and as a result, the director of AGESIC was fired for having LIED to sweep the dirt under the rug. Today we’re still here, with a new massive data leak that primarily affects many important figures within the state or who collaborate with it, as well as the infrastructure of a state that lies to its citizens by claiming its systems are secure, when for us infiltrating them is child’s play and always has been.
on our Telegram channel, we will be posting additional content from citizens who have registered for the Digital TuID, and very soon there will be many more leaks and new content:
Channel: https://t.me/pampabotrefes
Download the 8GB ANTEL data leak:
https://lapampaleaks.pages.dev/antel [Automatic redirect with updated link]
