Telefónica Investigates Cyberattack in Peru Affecting Over a Million Customers

Web Editor

June 5, 2025

a building with a sign that says telefonica on it's side and blue balls on the outside, Carlos Trill

Background on Telefónica and its Relevance

Telefónica, a Spanish telecommunications company, has recently disclosed that its Peruvian subsidiary was targeted in a cyberattack involving data of approximately one million of its customers in Peru. The incident has raised concerns about data security and privacy for Telefónica’s customers in the region.

Details of the Cyberattack

According to a statement from Telefónica, the company is investigating a potential security breach. A sample of one million records, published by an unknown actor on Monday, reportedly belongs to Telefónica’s Peruvian customers. HackManac, a platform tracking global cyberattacks, reported that the group “Dedale” was offering a database containing information of around 22 million Telefónica users, including full names, national identification numbers (DNI), mobile phone numbers, service plans, and status updates.

The cybercriminals demanded a payment of $1,500 in the dark web to prevent further disclosure of the remaining records. This amount is unusually low for such attacks, according to Telefónica sources.

Recent Developments in Telefónica’s Peruvian Operations

This cyberattack comes shortly after Telefónica completed the sale of its Peruvian subsidiary, Telefónica del Perú, to Argentine company Integra Tec International for $1 million. The transaction marked Telefónica’s exit from the Peruvian market, as part of a broader regional divestment strategy that also involved leaving Uruguay, Colombia, and Argentina.

Despite the sale, Telefónica continues to face challenges in Peru. Workers and creditors have reported outstanding debts totaling 500 million soles.

José Luis Manzano, president and founder of Integra Capital (the parent company of Integra Tec, which acquired Telefónica del Perú), recently projected that the company would be “operating in surplus” by March 2026.

Key Questions and Answers

  • What is the nature of the cyberattack against Telefónica’s Peruvian subsidiary? The attack involved a potential security breach, with cybercriminals obtaining and attempting to monetize data of approximately one million Telefónica customers in Peru.
  • What information was compromised in the cyberattack? The stolen data includes full names, national identification numbers (DNI), mobile phone numbers, service plans, and status updates of around 22 million Telefónica users.
  • Why is the demanded ransom unusually low? The $1,500 demanded by the cybercriminals is considered unusually low for this type of attack, according to Telefónica sources.
  • What recent developments have affected Telefónica’s Peruvian operations? Telefónica recently sold its Peruvian subsidiary, Telefónica del Perú, to Integra Tec International. Despite the sale, Telefónica continues to face challenges in Peru, including outstanding debts reported by workers and creditors.
  • What are Integra Capital’s projections for Telefónica del Perú? José Luis Manzano, president and founder of Integra Capital, projects that Integra Tec will be operating in surplus by March 2026.