Skip to content
ThreatCluster

Colombia's SENA Data Breach: 20.5M Records for Sale on Dark Web

First seen 3 Nov 2026, 17:45 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 3, 2026 at 18:46 UTC
  • •20.5 million records from SENA allegedly for sale on the dark web.
  • •Data includes sensitive personal and professional information.
  • •SENA has not confirmed the breach; authenticity of the claim is unverified.

A threat actor claims to be selling a database of over 20.5 million records allegedly stolen from Colombia's National Learning Service (SENA). The dataset reportedly includes sensitive information such as full names, national ID numbers, dates of birth, and academic backgrounds. The actor shared a sample record and is requesting payment in Bitcoin. SENA has not confirmed the breach, and the authenticity of the claim remains unverified. If true, this incident poses significant risks for identity theft and phishing attacks targeting individuals and organizations. The breach, if confirmed, would represent one of the largest data leaks in Colombia's history. Analysts warn that the data could facilitate convincing impersonation schemes. The situation is still developing as authorities investigate the claims.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-11-03
Alleged data breach reported
A threat actor claims to sell a database of 20.5 million records from SENA, including personal and professional data.
DailyDarkWeb

More articles in this cluster (2)

Following this threat?

Track Dirnic in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (7)

1 / 3

Common questions

What information is included in the leaked records?
The dataset reportedly includes full names, national ID numbers, dates of birth, addresses, and academic backgrounds.
Has SENA confirmed the breach?
No, SENA has not confirmed any breach or the authenticity of the claims made by the threat actor.
What are the potential risks of this data leak?
If genuine, the data could lead to identity theft and targeted phishing attacks against individuals and organizations.