The Government of Armenia’s mailing notification infrastructure has allegedly been compromised, resulting in a significant data leak currently up for sale on a cybercrime forum. A threat actor is claiming to sell a database containing approximately 8,000,000 records related to government mailings. The dataset, priced at $2,500, reportedly spans various official communications, including documents from the Compulsory Enforcement Service (DAHK), the Police (Patrol Service), and the judicial system.
According to the forum post and sample data provided, the compromised database is highly organized and suitable for large-scale processing. The leak allegedly includes linked PDF documents containing scanned court decisions, traffic violations, and tax demands.
The allegedly compromised data fields include:
-
Full names: Personal names of citizens and business entities receiving government mail.
-
Addresses: Physical mailing addresses and regions (e.g., Yerevan, Shirak, Lori).
-
Phone numbers: Recipient contact numbers, available in some cases.
-
Document types: Classifications such as court notifications, tax authority demands, and police decisions.
-
PDF Content: Actual scanned documents containing sensitive case details, tracking numbers, and official signatures.
-
Dates: Dates sent and tracking information for registered mail.
