On April 24, the mining company Kolpa was listed on the website of the SafePay ransomware group.
🇵🇪 The cybercriminal group claimed in its description that it had stolen 108 GB of data from the company.
The SafePay group leaked information on a page where it compiles all the documentation belonging to this company.
Some documents titled "Constancia de Alta del Personal en Formación" contain employee identification data, such as ID number (DNI), date of birth, nationality, full name, gender, marital status, phone number, email, and address.
Another document called "Data Entrega de Tarjetas Hijos."
This file exposes personal data of workers, such as ID number (DNI), names, job title, and department, as well as information about their family members, including full names of children, ID numbers, dates of birth, age, and gender.
#PII #dataleak #databreach #dataprotection #privacy #ransomware #cyberattack #Peru #cybersecurity #ciberseguridad
If you ever worked for this company, your data may be leaked on the dark web.
In Peru, the Personal Data Protection Law (Law No. 29733) requires companies to protect personal data and notify affected individuals in case of data breaches.
More details:
https://www.security-chu.com/2025/05/Minera-kolpa-ciberataque-safepay-ransomware.html