2026 Movistar Perú — dark-web forum marketing ~4M business-portal subscriber records (authenticity disputed)
Data compromised
Forum-advertised PII tied to Peruvian Movistar-branded subscribers per criminal listing samples summarized in press
Technical writeup
April 2026 trade and Spanish-language summaries described a cybercrime forum post offering roughly four million rows allegedly sourced from Movistar Perú business-portal-facing infrastructure (fields cited in summaries included national IDs, names, mobiles, dates of birth, and tariff or plan descriptors). Journalism stressed that Movistar Peru’s equity had transferred to Argentine Integra Tec under Telefónica divestiture, so attribution and containment messaging may involve that operator ecosystem. Operators had not—as of summarized coverage—corroborated the dump equivalence to a verified live-database breach versus recycled or exaggerated marketing.
Root cause
Unverified bulk data sale / alleged exfiltration from telecom business systems