Data breach exposes info for 80% of El Salvador's population

https://www.biometricupdate.com/202405/el-salvador-data-breach-includes-selfies-and-id-numbers-for-80-of-countrys-population

by jzebedee • 2 years ago

18 9 2 years ago

biometricupdate.com

dotcoma• 2 years ago

But they can pay with Bitcoin at the beach...

yieldcrv3• 2 years ago

but the breach appears to make Salvadorans relatively easy targets for cybercriminals looking to open accounts under assumed names, which would normally require them to gather other information contained in the leaked database

daily reminder that AML/KYC is a joke when you can just get a legitimate account with anybody else's info and access the international banking system

you would never be notified if someone simply made a bank account in your name, and never overdrafted it.

JumpCrisscross• 2 years ago

data seems unlikely to help any hacker attempting to defeat an onboarding or access control system protected with presentation attack detection

No. But these people have been forever de-anonymised in photos and videos online, as well as in potentially every place on the planet with an integrated security-camera system.

kragen• 2 years ago

right, it's going to be a godsend for honduras when they invade and conquer el salvador eight years from now; they'll be able to reliably target their slaughterbots to the family members of the particular government officials they need to surrender, leave doors unlocked, security cameras turned off, etc.

privacy is civil defense

yieldcrv3• 2 years ago

have been made available for free on the dark web

where on the dark web? that's the same as saying "on the internet" or "on social media"

edit: source article states Breach Forum

https://www.resecurity.com/blog/article/massive-dump-of-hack...

rolph• 2 years ago

apparently the term originates from onion routing, but i see darkweb as beyond that, to include all nonindexed resources, of all protocols.

everything you can reach but cant engine-search [google] for.

yieldcrv3• 2 years ago

the term for that has been deep web

WhereIsTheTruth• 2 years ago

El Salvador is training ground for the digital id/$/€; i wouldn't be surprised if it was done for that specific reason, to test infrastructure/prove a point

SahAssar• 2 years ago

Digital ID has been used for a long time in many countries (see things like estonias ids or swedens bankid/freja or any of the similar things in other EU countries and the rest of the world). Digital currency has also been around forever.

What El Salvador is trying to try is making decentralized currency part of an inherently centralized system (government identity and banking).

I don't think it'll work but don't confuse their thing with the generally accepted good thing of digital id's (being able to prove your identity to sensitive services like tax authorities, banks, etc.) or digital money (which is what we all have except when using actual cash and coins).

Data breach exposes info for 80% of El Salvador's population

Related Stories