[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fTjGEC-dwfTGFIcBtRwhtL3JdZSnQYfQ6c7lHswulr2o":3},{"article":4,"iocs":38,"watch_terms":47,"solutions":48,"lesson":51},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":20,"category":21,"article_tags":25},"7b770f2f-81a4-4a2f-afaa-6ee06c86a674","🚨🇨🇴 A threat actor known as DozerMx is distributing what they claim is a full leak from the Bo...","a-threat-actor-known-as-dozermx-is-distributing-what-they-claim-is-a-full-leak-f-b0376e","🚨🇨🇴 A threat actor known as DozerMx is distributing what they claim is a full leak from the Bogotá Secretary of Education (SED) in Colombia, in an escalation of an earlier post, and says they have taken down the agency's apoyoescolar[.]educacionbogota[.]edu[.]co server.\n\nThe https:\u002F\u002Ft.co\u002F1LlV5xADkD","A threat actor named DozerMx is reportedly distributing a full data leak from the Bogotá Secretary of Education (SED) in Colombia. This escalation follows an earlier post by the actor, who also claims to have taken down the agency's apoyoescolar.educacionbogota.edu.co server.","DozerMx claims full leak from Bogotá Secretary of Education and server takedown.","https:\u002F\u002Fx.com\u002FDarkWebInformer\u002Fstatus\u002F2063288086725820571","https:\u002F\u002Fpbs.twimg.com\u002Fmedia\u002FHKJFevIWMAACZn5.jpg","2026-06-06T15:53:08+00:00","2026-06-06T16:00:09.706731+00:00",7,[17],{"name":18,"type":19},"DozerMx","threat_actor","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":20,"icon":22,"name":23,"slug":24},null,"Breaches","breaches",[26,28,33],{"category":27},{"id":20,"icon":22,"name":23,"slug":24},{"category":29},{"id":30,"icon":22,"name":31,"slug":32},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":34},{"id":35,"icon":22,"name":36,"slug":37},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[39,43],{"type":40,"value":41,"context":42},"domain","apoyoscolar.educacionbogota.edu.co","Allegedly taken down server by threat actor",{"type":44,"value":45,"context":46},"url","https:\u002F\u002Ft.co\u002F1LlV5xADkD","Link to alleged data leak",[],{"controls":49,"vendors":50},[],[],{"slug":52,"title":53,"body":54,"framework_refs":55,"framework_notes":62},"educational-agency-suffers-major-data-breach-and-service-disruption","Educational Agency Suffers Major Data Breach and Service Disruption","The Bogotá Secretary of Education experienced a severe security incident where threat actor DozerMx successfully compromised their systems, leaked sensitive data, and disrupted critical educational services. This incident demonstrates the cascading impact of inadequate incident response capabilities, as the threat actor was able to escalate from initial compromise to full data exfiltration and public disclosure. Educational institutions are particularly attractive targets due to the vast amounts of personal data they store about students, families, and staff, making robust data protection measures essential.",[56,57,58,59,60,61],"NIST IR-1","NIST IR-4","CIS Control 11","CIS Control 13","GDPR Article 33","GDPR Article 32",{"NIST IR-1":63,"NIST IR-4":64,"CIS Control 11":65,"CIS Control 13":66,"GDPR Article 32":67,"GDPR Article 33":68},"An incident response policy and plan would have prepared the education agency to contain DozerMx before data was leaked.","Incident handling covers containing and recovering from intrusions, limiting the disruption to educational services.","Data recovery capabilities let the agency restore disrupted services from clean backups after the attack.","Network monitoring could detect the escalation from initial access to large data exfiltration.","Requires appropriate security for personal data, including student and staff information held by the agency.","Requires notifying the supervisory authority within 72 hours of a breach exposing personal data such as student records."]