Fmp.gob.pe Listed by Cloak Ransomware Group

Fondo MIVIVIENDA (Fmp.gob.pe), Peru’s government agency responsible for affordable housing programs, was listed on the cloak ransomware group’s leak site on December 20, 2024. The listing indicates that internal files were exfiltrated during a ransomware attack. The disclosure does not specify the number of records affected or detail exactly which documents were taken, leaving thousands of Peruvian families who have used the agency’s mortgage and housing services uncertain about their personal exposure.

Reported Details from the Listing

The primary disclosure on the cloak leak site states that Fmp.gob.pe suffered a ransomware incident and that attackers successfully exfiltrated internal files. No victim count is provided, and the listing does not describe the specific data types beyond “internal files.” The entry was first observed on December 20, 2024, consistent with cloak’s standard practice of publishing proof of compromise after an initial extortion window expires. Public reporting on similar listings confirms that such postings typically follow failed ransom negotiations, after which samples or full datasets are released to pressure the victim or invite secondary buyers.

Why This Matters for You and Your Family

If you or anyone in your household has applied for a mortgage, housing subsidy, or related financial support through Fondo MIVIVIENDA, your personal information may now sit in an attacker-controlled archive. Government housing agencies routinely collect full names, national identification numbers, addresses, income details, family composition, bank account information, and employment records. Even without an exact record count, the exposure of internal files from such an agency creates concrete risk for ordinary families relying on these programs. Once stolen government data surfaces on dark-web markets, it is frequently bundled with other records and sold repeatedly, increasing the chance that fraudsters will target you or your relatives with identity theft, loan fraud, or phishing campaigns that reference your actual housing application.

Doxxing and Identity-Chain Risks

Leaked government housing records rarely stay isolated. Attackers and data brokers routinely combine them with credential leaks, social-media handles, and public records to build detailed identity chains. A single email or national ID from the Fmp.gob.pe files can link your housing application to gaming accounts, email addresses, phone numbers, and family member profiles. This chaining turns a bureaucratic breach into long-term doxxing fuel: children’s names and ages from family subsidy forms can be matched to gaming usernames, enabling targeted harassment or account takeovers. The same data can be used to impersonate you when contacting banks or government offices, making disputes harder to resolve.

Cloak Ransomware Group Track Record

Public reporting attributes cloak to a relatively new ransomware operation that emerged in 2024. The group follows a double-extortion model: encrypt victim systems, exfiltrate data before encryption completes, then demand payment to prevent publication. Notable prior victims include mid-sized organizations across Latin America and Europe, though cloak maintains a lower public profile than older ransomware families. Their playbook typically begins with phishing or compromised remote desktop credentials, followed by rapid lateral movement, data compression, and exfiltration to cloud storage they control. When victims refuse to pay, cloak publishes samples on their leak site and sometimes offers the full archive to the highest bidder. The December 20, 2024 listing of Fmp.gob.pe fits this established pattern.

What to do

• Run a DoxxScan to map every link between your handles, emails, national ID, and real identity, then use the cleanup of Warden to remove what you can.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak exposing your family is caught in hours rather than months.
• Rotate any password you have reused at government or housing-related sites and switch to 2FA through an authenticator app instead of SMS.
• Cover the household — DoxxScan family coverage extends to dependents and children’s gaming accounts that often chain back to the same address or parent email.
• Let remediation specialists handle ongoing takedown requests across data brokers and leak sites for you while you focus on securing day-to-day accounts.

The Fmp.gob.pe breach shows once again that even essential government services can become gateways for identity abuse. Acting quickly on the exposure limits how far attackers can travel down the identity chain. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, and hands-on remediation by specialists, with household coverage that includes children’s gaming accounts vulnerable to credential-stuffing attacks that follow leaks like this one.