Nuevatel PCS de Bolivia S.A., operating as VIVA, the third-largest wireless carrier in Bolivia, appeared on the dunghill ransomware group’s leak site on July 15, 2024. The listing states that internal files were exfiltrated during a ransomware attack. The company has not yet issued a public breach notification detailing the scope, so the exact number of customers or employees affected remains unknown.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch Nuevatel
Get alerted the next time Nuevatel files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about Nuevatel’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
Details in the Leak-Site Listing
The dunghill leak site entry states that internal files were taken from Nuevatel PCS de Bolivia S.A. It does not specify the volume or types of records beyond that description. The posting follows the group’s standard pattern of publishing proof of compromise after encryption and failed ransom negotiations. No customer record count, no list of exposed data fields, and no ransom amount appear in the current listing. Public reporting on dunghill indicates the group typically posts samples or screenshots before threatening full data release.
Why This Matters for You and Your Family
If you live in Bolivia or have used VIVA mobile, broadband, or related services, your personal information may sit inside the stolen files. Telecommunications providers routinely hold names, national identification numbers, addresses, phone numbers, billing details, and sometimes payment information. Even without an exact count, the disclosure indicates that customer and operational data were targeted. For families this creates overlapping risk: one parent’s mobile account can link to children’s supplementary lines, shared addresses, and family contact lists. Once such data leaves controlled systems, it circulates on underground markets for months or years.
The Doxxing and Identity-Chain Implications
Telecom records are high-value connectors in doxxing chains. A phone number or national ID extracted from VIVA’s files can be cross-referenced with social-media handles, email addresses, gaming accounts, and public records. Attackers then map these links to build complete identity profiles. Credential leaks of this kind frequently cascade into account takeovers on streaming services, banking apps, and children’s gaming platforms that reuse the same passwords or recovery phone numbers. The longer the data remains unmonitored, the higher the chance that a single breach becomes the starting point for sustained harassment, SIM-swapping attempts, or fraudulent account openings in your name.