Guatemala Military Intelligence Directorate Listed by cyclops Ransomware Group

On June 30, 2023, the Guatemala Military Intelligence Directorate appeared on the leak site operated by the cyclops ransomware group. The listing states that internal files were exfiltrated during a ransomware attack on the directorate, part of Guatemala’s Ministry of National Defence. Anyone whose personal information appears in those files — service members, contractors, family members, or civilians connected to military records — now faces heightened risk of identity theft and targeted harassment.

Details in the Leak-Site Listing

The cyclops leak site, mirrored on ransomware.live, lists the Guatemala Military Intelligence Directorate as a victim and claims successful data exfiltration. The entry does not quantify the number of records affected, name specific file types, or disclose the ransom demand. It simply states that internal files were taken and warns of impending publication if demands are not met. The disclosure indicates the breach occurred through a ransomware deployment, though exact initial access methods remain unknown from the public listing.

Why This Matters for You and Your Family

Military intelligence data often contains names, addresses, phone numbers, national ID numbers, family details, and employment records. If your information or that of a relative in the Guatemalan armed forces was stored in directorate systems, it may now be in the hands of criminals. Even partial exposure can enable fraud, phishing campaigns, or physical targeting. Ordinary families connected to the military — not just high-ranking officers — are at risk because addresses and contact details rarely change quickly. The breach underscores that government and defense organizations hold sensitive data about everyday people who never expected their records to appear on a ransomware portal.

Doxxing and Identity-Chain Implications

Once internal files reach criminal forums, attackers combine them with other leaks to build detailed profiles. A military ID number can link to voter rolls, banking records, or children’s school documents. This creates an identity chain that leads to doxxing, account takeovers, and extortion. Credential leaks from related systems frequently cascade into gaming accounts, especially those used by service members or their children. A single exposed email or password from this claimed breach can compromise Steam, Roblox, or Discord profiles, exposing chat logs, friendships, and location data that further expands the attack surface for the entire household.

Cyclops Ransomware Group Track Record

Public reporting attributes cyclops as a ransomware operation that emerged in early 2023. The group typically gains initial access through phishing or exploited remote desktop services, exfiltrates data before encrypting systems, and then runs a double-extortion campaign by threatening to publish stolen files on its leak site. Notable prior victims have included healthcare providers, manufacturers, and government-linked entities across Latin America and Europe. The group’s playbook relies on pressure through public exposure rather than solely on encryption, which explains why the Guatemala Military Intelligence Directorate listing appeared promptly after the claimed compromise.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by the service.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours rather than months.
• Rotate any password used for Guatemalan government, military, or related contractor portals anywhere it has been reused, and switch to 2FA through an authenticator app instead of SMS.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which often chain back to the same breached addresses or emails.
• Let remediation specialists manage takedown requests for any exposed personal documents appearing on data broker or forum sites.

The cyclops listing of the Guatemala Military Intelligence Directorate is a reminder that defense-related data breaches quickly become personal threats for ordinary families. Starting protective steps now limits how far attackers can travel down the identity chain. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts vulnerable to credential-based takeovers.