Colombia’s Registraduría Denies System Access Breach

Colombia’s National Civil Registry said a review of audit logs, monitoring controls, access traceability, and digital evidence found no intrusions or unauthorized access to its information systems. The statement came after posts tied the agency to an alleged clandestine offer of data on Colombian citizens.

What was claimed about the alleged leak?

A seller on a clandestine forum claimed to have nearly 41.4 million records linked to the Registraduría, including supposed photographs, fingerprints, and other identifying data. Publimetro Colombia said that claim had not been publicly confirmed by the Registraduría, ColCERT, or any data protection authority.

Dark Web Intelligence also circulated a report that attributed the offer to an actor identified as GordonFreeman1. According to that post, 41,415,693 records were being offered, and the database was said to weigh about 1.45 TB. It also said the listing included full names, ID numbers and status, issue dates, birth dates and places, plus API-based query access.

What did the Registraduría say?

The agency said its technical reviews found no signs of intrusion or irregular access to citizens’ information. Semana reported that the Registraduría reached that conclusion after reviewing audits, monitoring, traceability, and digital evidence.

Vanguardia also reported that the agency spoke out after the hacking rumors and ruled out unauthorized access to its information systems. In both cases, the official response focused on internal controls and the absence of technical indicators supporting a confirmed breach.

What other detail was attributed to the alleged actor?

Dark Web Intelligence also said the seller claimed to have first gained access through a vulnerable API and asked for $20,000 for the data. That account, however, was presented by the same post as not independently verified.

For now, the public record consists of those unconfirmed claims about an alleged records sale and the Registraduría’s denial, which said it found no intrusions or unauthorized access to its systems.