IFLUSAC S.A.C, one of the largest mechanical, natural gas, and fire protection contractors in Peru, has allegedly been compromised in a significant data breach. The incident involves the sale of a database described as “super-clean” by the threat actor, which purportedly contains sensitive corporate and project information spanning from 2021 to 2025. The company is known for its major industrial projects with clients such as COSAPI, RINTI, and COPEINCA.
According to the actor, the compromised archive totals 22 GB and includes comprehensive documentation related to the company’s industrial operations. The allegedly compromised data includes:
-
Project Documentation: Complete as-built plans, piping isometrics (gas, steam, industrial water, fire-fighting), and material lists.
-
Quality Assurance Records: UL/FM certificates, test reports (hydrostatic, liquid penetrant, magnetic particle, pneumatic hermetic), and equipment certifications (Patterson, Wilo, Cla-Val, etc.).
-
Media: High-quality photos and videos from sites, tests, welds, and equipment installations.
-
Internal Communications: Project WhatsApp correspondence, internal meeting minutes, and company templates.
-
Administrative Data: Personnel payroll (“Tareo”), invoices, brochures, and sales presentations.
