A threat actor, known only as “Repack,” didn’t just steal raw invoice files. Instead, they downloaded thousands of BCP facturas (invoices) and repacked them into a single, searchable SQLite database. Each invoice contained not just transaction details but internal reconciliation flags — revealing which corporate accounts had been flagged for unusual activity.
: Locate the section for "Comprobantes de Pago" (Payment Vouchers). escondatagate descargar factura bcp repack better
Escondatagate became a cautionary tale: the real risk isn’t just data theft — it’s when stolen data gets repacked into something deceptively useful, turning private invoices into public puzzle pieces. A threat actor, known only as “Repack,” didn’t