34,316 Sitrans Customer Records Just Went Public

HEROIC's threat intelligence team identified a database breach affecting Sitrans, a Colombian logistics and transportation company. Dated December 16, 2024, the Sitrans leak exposed 34,316 records containing email addresses, phone numbers, first names, last names, and birthdays of the company's customer base.

Why This Sitrans Database Breach Is Dangerous

Logistics companies sit at the center of sensitive personal logistics: where you live, when you shipped, and how to reach you. The Sitrans leak combines verified full name, birthday, and phone number, which is exactly the set criminals need to clear identity verification at banks, telecoms, and government portals. At 34,316 records, that is a substantial base for targeted fraud across Colombia.

What Was Exposed in Sitrans

• Email addresses
• Phone numbers
• First names
• Last names
• Birthdays

Why This Matters

Birthday plus full name plus phone number is the classic SIM-swap kit. Criminals use this combination to impersonate a victim to a mobile carrier, port the phone number, then intercept SMS-based two-factor codes to take over bank and cryptocurrency accounts. For Sitrans customers, the fallout can extend far past a logistics account and into every service tied to their phone number.

How Database Breaches Work

Logistics and transport platforms run complex, customer-facing systems with legacy integrations for tracking, billing, and carrier partners. Attackers exploit weaknesses in APIs, admin interfaces, or third-party tools to pivot into the core customer database. Once inside, they dump PII tables in bulk and post them on forums or sell them to identity fraud crews who target specific regions, like Colombia, for localized scams.

Check If You Are Affected

HEROIC tracks more than 400 billion compromised records across breaches and dark web leaks. Run a free scan to see if your email is tied to the Sitrans breach, and get step-by-step guidance to lock down your identity.