Digitel Venezuela Breach: 7 Million Telecom Subscribers Exposed

HEROIC logged the Digitel breach on March 13, 2025, tied to digitel.com.ve. The Venezuelan telecommunications provider saw approximately 7 million customer records compromised, with 2,943,640 unique records verified in the HEROIC index, covering subscriber names, emails, and mobile numbers.

Why This Database Breach Is Dangerous

Telecommunications data is the Rosetta Stone of targeted attacks. A verified mobile number, tied to a real name and email, unlocks SIM swap schemes, WhatsApp hijacking, two-factor bypass, and bank fraud. In Venezuela, where WhatsApp functions as the dominant communication channel for banking and business, the damage from widespread mobile number exposure is particularly acute.

What Was Exposed in the Digitel Leak

• Email addresses
• Phone numbers
• First names and last names
• Subscriber profile identifiers
• Account metadata tied to active lines

Why This Matters

Digitel mobile numbers are front and center on the Venezuelan social engineering menu. Fraudsters can attempt SIM swaps, send fake billing notifications in Spanish, or pose as Digitel support to trick customers into transferring airtime, approving banking pushes, or handing over verification codes. Because WhatsApp relies on the phone number as identity, hijacking one line chains into fraud across the victim's entire contact network.

How a Telecommunications Database Breach Happens

Telcos run sprawling subscriber management systems with years of legacy code, integrations to billing partners, and access points for hundreds of employees and contractors. Attackers exploit exposed admin portals, stolen credentials from support staff, or vulnerabilities in public-facing APIs. Once inside, they export the customer table in staged chunks, then leak or sell the data on dark web forums.

Check If You Are Affected

Digitel customers should treat unsolicited calls, SMS, and WhatsApp messages with caution, avoid confirming personal information over the phone, and set a PIN with their carrier to block SIM swap requests. Use the HEROIC scanner, tracking more than 400 billion breached records, to check whether your email surfaces in the Digitel leak.