www.minex.gob.gt Listed by Onyx Ransomware Group

On November 21, 2022, the Guatemalan government agency www.minex.gob.gt appeared on the leak site operated by the Onyx ransomware group. The listing states that internal files were exfiltrated during a ransomware attack, although the exact number of records affected and the specific data types remain undisclosed by the group.

Reported Details from the Listing

The primary disclosure on the Onyx leak site indicates that the Ministry of Economy of Guatemala suffered a ransomware incident resulting in the theft of internal files. The entry does not quantify the volume of data taken, list the file names or categories exposed, or specify a ransom demand or payment deadline. It simply states that data was stolen and is held by the attackers. Public mirrors of the leak site, such as ransomware.live, preserve this exact claim without additional detail from the victim organization.

Why This Matters for You and Your Family

When a government ministry’s internal systems are breached, the information inside often includes personal details about citizens, employees, contractors, and business partners. Even though the Onyx listing does not specify what was taken, internal files from a ministry of economy frequently contain tax records, business registrations, employment data, or correspondence that can be traced to individuals. If your name, address, national identification number, or financial activity appears in any of those files, the exposure creates long-term risk of identity theft, fraud, and targeted scams against you or members of your household.

The Doxxing and Identity-Chain Risk

Ransomware operators rarely stop at posting a single sample. Once internal files leave an organization, attackers and subsequent buyers can map disparate pieces of information together. An email address found in one document can be linked to accounts on other services; a phone number can tie your identity to social-media handles or family members. These chains accelerate doxxing, enabling stalkers, fraudsters, or extortionists to locate where you live, where your children attend school, or which online gaming accounts belong to your family. Credential leaks of this nature frequently cascade into account takeovers precisely because people reuse the same passwords across work, personal, and gaming services.

Onyx Ransomware Group Track Record

Public reporting attributes the emergence of Onyx to late 2021. The group has targeted organizations across Latin America, Europe, and North America, with prior victims including manufacturing firms, healthcare providers, and local government entities. Their typical playbook begins with initial access gained through phishing or exploited remote desktop services, followed by lateral movement inside the network, data exfiltration, and then deployment of ransomware. After encryption, they pressure victims by publishing samples on their leak site and threatening full data release if payment is not made. The Onyx leak site continues to list new victims on a regular basis, indicating an active and ongoing operation.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real-world identity, then use the cleanup of Warden to remove what you can.
• Rotate any password you ever used at www.minex.gob.gt or any other Guatemalan government portal, and secure every reused account with 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next time your information surfaces you learn within hours instead of months.
• Cover the household with DoxxScan family protection that extends to dependents and your children’s gaming accounts, which often become the weakest link in an identity chain.
• Let remediation specialists handle takedown requests across data brokers and extortion sites on your behalf while you focus on securing your own digital footprint.

The breach of www.minex.gob.gt demonstrates how quickly government data can fuel broader identity crimes that reach ordinary families. Starting with a DoxxScan gives you both immediate visibility into your exposure and ongoing defense through continuous monitoring, identity-chain mapping, and hands-on specialist remediation that includes household coverage for gaming accounts. Source: https://www.ransomware.live/id/d3d3Lm1pbmV4LmdvYi5ndEBvbnl4