Attackers Published 135,307 Cámara de Comercio del Huila Member Records

HEROIC's DarkHive team confirmed a database breach affecting Cámara de Comercio del Huila, the Colombian business support organization at cchuila.org, first observed on December 1, 2024. Threat actors extracted a roughly 2.2 million row export, and after deduplicating against our 400B+ record index we verified 135,307 unique members exposed. The leaked dataset carried email addresses, phone numbers, first names, and last names, the core roster of a regional chamber of commerce.

Why This Database Breach Is Dangerous

Chamber of Commerce directories give attackers a ready-made list of business decision makers. With names, work emails, and phone numbers in hand, adversaries can pitch vendor fraud, wire-transfer scams, and BEC attacks against entrepreneurs and executives across the Huila region of Colombia.

What Was Exposed in the Cámara de Comercio del Huila Breach

• 135,307 unique member records
• Email addresses tied to business accounts
• Phone numbers useful for voice phishing
• First and last names for personalized Spanish-language scams

Why This Matters

Members often use their chamber contact details as their primary business channel, so a breach here ripples into every commercial conversation they have. Spear phishing aimed at business owners typically asks for urgent invoices or tax filings, which the leaked data makes easy to personalize.

How Database Breaches Like This Happen

Regional business institutions frequently maintain member directories on custom portals built years ago by local vendors. Without a security-minded maintainer, these systems accumulate unpatched CVEs, default admin credentials, and exposed backup files. A single misconfiguration can hand an attacker the full member list.

Check If You Are Affected

Run HEROIC's free 400B+ record breach scanner to check if your email appears in the Cámara de Comercio del Huila breach. The scan takes seconds and surfaces every exposure tied to your identity, plus clear next steps to protect your business and personal accounts.