Peru’s Interseguro Confirms Unauthorized Access to Some Customer Information
Summary
Interseguro acknowledged unauthorized access to some customers’ information and said it contained the incident. Ransomware group Direwolf separately claimed to have stolen 2.5 TB, but that claim and the alleged data exposure have not been independently verified.
Key points
- Interseguro said an unauthorized third party accessed information belonging to a group of customers and that it activated response protocols and contained the incident.
- The company did not specify which personal data or systems were involved or how many customers were affected.
- Direwolf listed Interseguro on its extortion portal and claimed to have extracted about 2.5 TB, including internal files, source code, database backups, and customer records; these claims lack independent verification in the article.
- The alert mentioned possible exposure of national ID, SOAT, and financial information, but the insurer’s statement does not confirm that these were accessed.
- Interseguro said the accessed data would not enable transactions or insurance operations, and that policies, claims handling, and benefit payments continued normally.
- The company said it was reinforcing security controls but did not detail the measures or mention an external investigation or notification to authorities.
Article Details
- Victim Organization
- Interseguro
- Victim Domain
- interseguro.com.pe
- Incident Type
- Unauthorized access to customer information; Direwolf separately alleged data theft and publication.
- Data Types Exposed
- Customer information (unauthorized access acknowledged by Interseguro; specific categories not disclosed)
- Internal documents, source code, database backups, customer records, national identity documents (DNI), SOAT-related information, and financial data (reported as alleged exposure attributed to Direwolf; not independently verified)
- Affected Records
- Not disclosed; claims of millions of records were not independently verified.
- Affected Data Size
- Direwolf claimed approximately 2.5 terabytes; not independently verified.
- Operational Impact
- Interseguro said it contained the incident and that policies, coverage, claims handling, and benefit payments continued normally.
- Ransom Or Extortion
- Direwolf reportedly listed Interseguro on a dark-web extortion portal and claimed to have extracted information. No ransom demand or payment was reported.
- Claim Status
- confirmed