Dominican Republic Vaccinations

A dataset of 819,101 rows tied to COVID-19 vaccination records in the Dominican Republic has been indexed, with an estimated breach date of January 1, 2024. No actor has claimed responsibility for the dataset as indexed. Independent reporting connects the exposure to two events in 2024: Listín Diario reported in April that attackers stole vaccination records from the Ministry of Public Health and Social Assistance, and the cyber incident tracker Hackmageddon recorded a May 2024 leak of personal information for roughly 820,000 people in the country, posted by an actor using the name CiberInteligenciaSV. The scale of that reported leak closely matches the size of the dataset in this listing, though the exact source of the data has not been confirmed.

Breach Timeline

April 13, 2024: Listín Diario reported that unidentified attackers stole more than 8,000 files containing COVID-19 vaccination records from the Ministry of Public Health and Social Assistance. According to the report, the ministry's computers lacked updated antivirus protection, allowing malware to extract data including names, phone numbers, and addresses. The National Police investigation had identified one IP address at the time of reporting.

May 2024: Hackmageddon's incident timeline recorded that a threat actor identified as CiberInteligenciaSV leaked the personal information of approximately 820,000 individuals from the Dominican Republic, including their COVID-19 vaccination statuses, on Breach Forums.

What Information Was Compromised?

Our analysis found the following data types in this breach: government ID numbers (813,283 records), vaccine details (818,825 records), names (818,576 records), and hospital names (637,275 records). Reporting on the related May 2024 leak described additional fields, including municipalities, dates of birth, vaccination centers, number of doses received, vaccination dates, and the brands of vaccines administered.

Not every individual is affected by every type of data listed here.

What Are the Potential Risks for Affected Individuals?

A national ID number combined with a full name is a core ingredient for identity fraud. Criminals can use such details to open accounts, impersonate victims in official procedures, or craft convincing phishing messages that reference real personal information. Because this dataset also reveals vaccination status and where people received their shots, it exposes health-related information that many people would consider private. Scammers sometimes use health data to lend credibility to fake vaccine-record offers, insurance pitches, or government impersonation schemes. Anyone whose data appears here should treat unexpected calls, emails, or texts that reference their vaccination history with suspicion.

What Is Dominican Republic Vaccinations Doing in Response?

This listing corresponds to government-held vaccination records rather than a private company. Listín Diario reported in April 2024 that the National Police were investigating the theft of vaccination files from the Ministry of Public Health and Social Assistance and had traced activity to one IP address, though no arrests had been reported at that time. As of September 25, 2026, the review found no public breach notification from the ministry addressing the larger dataset indexed here, and no actor has come forward to claim it.

What Should You Do If You Were Affected?

If you were vaccinated in the Dominican Republic and your records may be involved, take these steps:

Watch your accounts and credit for unexplained activity, and report anything unusual to your bank and local authorities promptly.

Be skeptical of unsolicited messages that mention your vaccination status, ID number, or any clinic or hospital where you may have been vaccinated. Verify claims through official government channels before responding.

Consider monitoring whether your cédula or other personal details are being misused, and follow official guidance from Dominican authorities if you suspect identity fraud.