Argentina RENAPER national ID database breach (2021)

In October 2021, an attacker exfiltrated personal identity records for all 45 million Argentines from RENAPER — the Registro Nacional de las Personas, the Argentine state agency that issues national ID cards. Photos and personal details for President Alberto Fernández, Lionel Messi, Sergio Agüero, and 41 other public figures were posted to Twitter as proof; the full dataset was then put up for sale on a dark-web forum.

What happened

The intrusion vector was unusual in its simplicity: Argentina's Ministry of Interior subsequently acknowledged that an unknown party used a compromised VPN account belonging to another branch of the government to query the RENAPER database and retrieve records.

Public attention started with a Twitter account, @AnibalLeaks, registered specifically to publish the proof: ID-card photos and personal data for 44 Argentine celebrities, including the president and the country's biggest football stars. The full dataset offered for sale on the underground included:

• Full names, home addresses, dates of birth, gender.
• ID card issuance and expiration dates.
• Labour identification (CUIL) codes and Trámite numbers.
• Citizen numbers and government-issued photo IDs — biometric in effect.

The Argentine Ministry of Interior officially stated that "the RENAPER database did not suffer any data breach or leak" and announced an investigation of eight government employees suspected of insider involvement. The hacker publicly contradicted the government's denial, claiming to hold a copy of the full data.

Impact

• Identity records for an estimated 45 million Argentines — effectively the entire population — exposed.
• Photos (a biometric-equivalent) for all citizens included.
• Public figures including the president and major footballers used as the public proof-of-access.
• Government denial vs. underground evidence created a credibility crisis for RENAPER.
• Investigation of insider-employee involvement; no public indictments reported.

Why it matters

Argentina RENAPER is the largest publicly disclosed national-ID database breach in Latin American history. The case demonstrates how a single compromised inter-agency VPN account can convert an entire country's identity register into a saleable underground asset — and how official denials can compound the harm when public, technical evidence contradicts them.