What Happened
La Mundial de Seguros, a Venezuelan insurance company with over fifty years of operation, suffered a data breach on December 14, 2024, when the ransomware group Funksec targeted the company’s systems. However, a separate and more significant incident occurred in August 2025, when an attacker using the handle N1KA posted raw SQL database dumps from lamundialdeseguros.com on the dark web forum darkforums.st, exposing sensitive user data including full names, email addresses, birthdates, hashed passwords, session tokens, adviser credentials, and payment link details. The leaked SQL statements revealed information from multiple database tables such as `quoters`, `advisers`, and `payment_links`, suggesting either a misconfigured server or direct database exfiltration. The breach exposed personally identifiable information that could be used for identity theft and phishing attacks, and the repeated incidents against the company underscore serious weaknesses in its cybersecurity posture, particularly regarding database security and access control.
