2026 Uruguay CEIP/GURI — LaPampaLeaks claims 1.14M family + 3.2M enrolment records of schoolchildren (unverified)

Unverified data-sale claim against a government education platform that previously confirmed a cybersecurity incident — On August 6, 2026 Dark Web Informer reported that an actor posting as LaPampaLeaks claims to hold GURI (CEIP/ANEP) primary-education databases for Uruguay, describing a family-application table of 1,144,324 records and enrolment databases totalling about 3.2 million covering pupils enrolled 2012–2025, with national IDs, names, dates of birth, home addresses, phones, emails, family identifiers and school/class attendance, already loaded into a paid lookup service. DWI marked the claim unverified while noting sample screenshots that appeared to show authenticated queries. Separately, ANEP and DGEIP publicly stated they had detected a cybersecurity incident affecting GURI, took the platform offline, and later restored GURI Familia (app and web) while continuing work on teacher access — El País covered the outage and linked it to a broader wave of Uruguayan public-sector incidents including Ceibal and Banco Hipotecario. At indexing time ANEP had not published an attested count of children whose records were copied, so recordsAffected uses the actor’s 1,144,324 family-app figure and is labelled unverified; update if ANEP or Uruguay’s data-protection authority publishes a formal notice.