After the news published by Atlas21, account X of the wallet wakes up with a press release. No reference to the leak of personal data of 5.1 million Salvadoran citizens.
After nearly two years of inactivity, the social media account of Chivo Wallet has resumed posting content. The news about the data leak from the Chivo Wallet ATM network, reported yesterday by Atlas21, has prompted the managers of the dormant Salvadoran state wallet account to issue a press release in response to the news.
“Our users’ data is protected and Chivo security has not been breached,” writes the company.
“The publicly released information concerns an ATM located in the department of San Miguel, which was stolen on March 21, 2023. An individual gained access to information exclusively related to the operations of that ATM. The leak does not contain personal data and does not jeopardize any of the sensitive information of our wallet.”
In the statement, Chivo labels the rumors about its security as “fake news,” but does not provide any response to the most important question: did the personal and sensitive data of 5.1 million Salvadorans released publicly by a hacker group last week come from Chivo? Why is it that after the publication of the data, the code to perform a brute force attack on Chivo’s servers was also released by the same group of hackers? Can the state-owned company categorically deny any connection with the breach of privacy of nearly the entire adult population of El Salvador?
Atlas21 awaits answers.