2026 DIAN Colombia — 18M records (appointment platform breach)
Data compromised
Names, national IDs, emails, phone numbers
Technical writeup
Colombia's tax authority DIAN suffered breach of agendamiento.dian.gov.co appointment scheduling platform. Hacker 'ArcRaidersPlayer' exploited known vulnerability in CIEL Ingeniería-developed system. ~18M records, 16 GB: names, ID numbers, emails, phones. Exploit offered for sale. DIAN confirmed incident March 6; appointment system disabled. Prosecutor investigating extortion.
Root cause
Vulnerability in third-party appointment platform; CIEL Ingeniería