Interseguro reports unauthorized customer access

Interseguro, the Peruvian insurer owned by Intercorp, told customers that a third party accessed information from a group of them without authorization. Separately, DigiSOC said the Dire Wolf ransomware and extortion group listed it on its leak site and claimed to have taken about 2.5 TB, though that volume and the content were not independently verified.

What did Interseguro report?

Interseguro notified customers that a third party had accessed information from a group of its clients, according to DigiSERT, which relayed the insurer's statement. The available material does not specify what type of data was exposed or how many people were affected.

The mention appears in DigiSOC's Weekly Bulletin No. 300, published on Oct. 16, 2026. In that same publication, the intelligence company also linked Interseguro to a claimed extortion campaign attributed to Dire Wolf.

What did Dire Wolf say about Interseguro?

DigiSOC said Dire Wolf added Interseguro to its leak site and claimed to have exfiltrated about 2.5 TB, but noted that the volume and the contents were not independently verified. For that reason, the post should be read as an unconfirmed attribution.

The material provided did not include any independent technical validation of the alleged exfiltration or of the information that may have been published. It also did not say whether the incident described by the insurer and Dire Wolf's post are connected.

What other recent cases appeared in Peru?

Separately, allegations surfaced involving Banco Pichincha Peru and a possible SQL injection, although the authenticity of the intrusion and the data has not been confirmed. Kalir Brief reported that an actor identified as Returnero claimed to have compromised the bank and offered banking data and access to other sites.

CyberPulse56, in a threat intelligence post, also reported that Returnero, linked there to MORTEMTEAM, advertised a supposed database tied to Banco Pichincha Peru. The same post said the incident, the database's authenticity and the number of records had not been independently verified.

What does this set of reports show?

The three tracks point to different but related data-handling issues in Peru's financial sector, with one case confirmed through a customer notification and the other two based on attributions that have not yet been validated. Based on the material available, there is not enough information to establish an operational link among all of them.