Colombia’s DIAN Confirms Unauthorized Access to Appointment-System Data
Summary
Colombia’s DIAN says unauthorized access affected personal data in its appointment system and was linked to an extortion attempt. The agency temporarily disabled the system and says tax data and user credentials remain protected.
Key points
- DIAN reported that technical analysis identified unauthorized access to personal data belonging to users of its appointment system, developed by CIEL Ingeniería.
- The agency said the incident was linked to an extortion attempt and that it filed a complaint with Colombia’s Fiscalía General de la Nación.
- DIAN temporarily disabled online appointment scheduling while it reviews logs and conducts security tests and technical assessments.
- DIAN said tax and customs information, as well as users’ passwords and access credentials, were not compromised.
- The agency said its other services and 56 in-person contact points continue operating normally while it works toward safely restoring appointments.
Article Details
- Victim Organization
- Dirección de Impuestos y Aduanas Nacionales (DIAN)
- Incident Type
- External cyberattack involving unauthorized access to personal data in the virtual appointment system
- Data Types Exposed
- Personal data of appointment-system users
- Operational Impact
- The virtual appointment system was temporarily disabled for containment and security analysis. DIAN said its tax and customs information and users' passwords and access credentials were not compromised, and that its core services and in-person assistance continued normally.
- Ransom Or Extortion
- DIAN reported that the incident may be associated with an extortion attempt and filed a formal complaint. No ransom demand or payment was reported.
- Claim Status
- confirmed