The Renaper denied that its database was hacked

On Saturday October 9 the Renaper learned that a Twitter user identified by the name of @aniballeaks -the account was denounced and is currently suspended- had published the images of 44 citizens on said social network.

Aníbal Leaks.png

The Renaper computer security team made a query on the 44 people involved in order to ascertain the latest consumption made by using the Digital Identity System (SID) on said profiles, detecting that 19 images had been consulted at the exact moment in that were published on the social network Twitter from an authorized VPN (Virtual Private Network) connection between ReNaPer and the Ministry of Health of the Nation, and all the images had recently been consulted from that same connection.

Said connection would have made several individual queries to the Renaper databases between 15:01 and 15:55 through the SID data validation service which, once the DNI and Sex have been entered, returns the person who consulted all the data printed in the National Identity Document, including image and other personal data, which were later uploaded to Twitter, without the consent of the owner thereof.

After this preliminary analysis, the specialists ruled out an unauthorized entry into the systems or a massive leak of the agency’s data.

Likewise, it was detected that an individual authorized user had improperly used the identity validation service for personal purposes through an authorized certificate from the Ministry of Health of the Nation, connecting through the corresponding VPN, with username and password.

https://twitter.com/mis2centavos/status/1447251622334275595

The programmer and tweeter, Javier Smaldone, denounced the leak on his Twitter account and said that high resolution photos and DNI processing numbers of politicians, journalists and athletes such as President Alberto Fernández, the former Security Minister, Patricia Bullrich, the national deputy Máximo Kirchner, were published, Leonel Messi and Kun Aguero, among others.

In addition, he indicated that from that same account – @ aniballeaks, now suspended – the data of more than 1 million people from the social work of the armed forces (IOSFA).

“It is seen that ‘the basements of democracy’ continue to function as always. It is a lot to ask someone to investigate how these data (and who knows how many more) end up in the hands of any crop. Hopefully they at least do not go out to hunt parsley, as usual “, said the computer specialist, in clear reference to the episode that occurred in 2019, when after giving the notice about a massive leak of data on the Argentine Federal Police, known as #LaGorraLeaks He was delayed at the request of Federal Court No. 9 for background checks and later released.

Leave a Reply