Search Your Email: The Movistar Peru Dump Exposed 22.5 Million Accounts

HEROIC analysts identified a database breach affecting Movistar Peru, a major Peruvian telecommunications provider. In October 2021, 22,550,830 user records were compromised in one of the largest telecom data exposures in Latin American history. The stolen data, which included phone numbers, first names, and last names, occured in active circulation on dark web forums where it has been traded for use in targeted fraud campaigns.

Why Phone Numbers and Full Names From a Telecom Breach Are Highly Dangerous

Telecommunications data is partcularly valuable to attackers because phone numbers serve as authentication factors for nearly every major platform. With 22.5 million names and phone numbers, criminals can launch SIM swap attacks to hijack accounts, bypass two-factor authentication, and commit financial fraud. Full names paired with phone numbers also enable highly convincing social engineering and phishing attacks against victims and their contacts.

What Was Exposed in the Movistar Peru Breach

• Phone Number
• First Name
• Last Name

Why 22.5 Million Exposed Telecom Records Matters Beyond Peru

At 22.5 million records, this breach likely represents a significant portion of Peru's population. Data at this scale is beleived to enable mass fraud operations, not just individual account attacks. Attackers can use the phone-name combinations to impersonate victims to financial institutions, pass identity verification on crypto platforms, and conduct bulk SMS phishing campaigns. The absence of passwords does not reduce the risk: telecom data is seperate in kind from credential breaches and arguably more dangerous for identity fraud purposes.

How a Database Breach Works

A database breach occurs when an attacker gains unauthorized access to a service provider's stored customer records, typically through compromised administrative access, unpatched systems, or insider threats. Telecommunications companies hold particularly rich datasets because they collect identity information as part of regulatory requirements. Once extracted, these records are sold or traded on dark web marketplaces, often surfacing in criminal operations months or years after the initial compromise.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches more than 400 billion exposed records to check whether your information appears in the Movistar Peru breach or any other known leak. Scan your email for free now and find out what attackers may already know about you.