Suspected Data Breach at Colombia’s Tax Authority Exposes Millions of Records A potential data breach at Colombia’s national tax agency, the Dirección de Impuestos y Aduanas Nacionales (DIAN), has raised concerns after a hacker allegedly accessed and leaked sensitive information belonging to millions of citizens. The incident, reportedly linked to the alias "ArcRaidersPlayer," targeted the agency’s appointment scheduling platform (agendamiento.dian.gov.co), a widely used portal for booking in-person tax services. Initial reports suggest up to 18 million records may have been exposed, including names, identification numbers, email addresses, and other personal data. The leaked database, estimated at 16 gigabytes, was allegedly offered for sale online, though authorities have not confirmed its authenticity or full scope. Cybersecurity experts warn that if verified, the breach could enable identity theft, tax fraud, and phishing attacks targeting affected individuals. Preliminary analyses indicate the breach may have exploited a known vulnerability in the appointment system’s software, which some experts claim went unpatched for months. DIAN, responsible for Colombia’s tax and customs operations, maintains extensive databases of financial and personal information, making it a prime target for cybercriminals. The incident reflects broader cybersecurity risks as government services shift online. Colombia has expanded digital tax platforms in recent years, increasing convenience but also exposure to threats. Similar attacks have surged across Latin America, with public institutions facing ransomware, phishing, and data breaches. As of now, Colombian authorities have not released a full technical report, but investigations are underway to determine the breach’s origin and impact. If confirmed, this could rank among Colombia’s largest government-related data exposures, heightening calls for stronger cybersecurity measures in public digital services.