17 Million Records Leaked From Ecuador's Transit Agency — What Expats Need to Know

What Happened

A threat actor using the alias "Gordon Freeman" published a database of 17 million records in CSV format allegedly extracted from Ecuador's ANT (Agencia Nacional de Tránsito — the National Transit Agency). The data reportedly spans records from 2018 through 2026.

The breach was first flagged by Vecert Analyzer on April 3, 2026. Teleamazonas reported the details on April 27.

What Was Exposed

The leaked data includes:

• Full names and cédula numbers (national ID) or RUC (tax ID)
• Email addresses, home addresses, and phone numbers (including mobile — Movistar numbers specifically noted)
• Vehicle data: license plates, engine and chassis numbers, make/model/year, engine displacement
• Tax valuations, exemption status, registration year, last payment date, vehicle weight and capacity

This is essentially a complete profile — personal identity, home location, contact information, and vehicle ownership — for millions of Ecuadorian residents.

ANT's Response

As of 10 PM on April 27, 2026, the ANT had not publicly acknowledged the data breach itself.

What the agency did do: issue a warning about fraudulent messages. The ANT confirmed it "no envía correos ni mensajes de texto para realizar cobros de multas" — it does not send emails or text messages to collect traffic fines. The official website is www.ant.gob.ec. They warned against clicking links from domains ending in .skin, .net, .com.ec, .xyz, or .com.

What This Means for Expats

If you own a vehicle registered in Ecuador, your license plate, chassis number, and personal details are likely in this database. This applies whether you have a cédula or RUC.

Expect phishing attempts. With 17 million records including names, phone numbers, and vehicle data, scammers can craft convincing messages — fake "traffic fines," fake "registration renewals," fake "insurance quotes" that reference your actual vehicle.

Practical steps to take now:

• Ignore any email, SMS, or WhatsApp message claiming you owe ANT fines — the agency does not collect this way
• Only use www.ant.gob.ec for transit-related transactions
• Monitor your bank accounts for unauthorized activity
• Be skeptical of any unsolicited contact that references your vehicle details — scammers now have this information
• Enable two-factor authentication on banking apps and email
• Don't click links in messages about traffic violations, vehicle taxes, or registration renewals unless you initiated the query on the official site

This is one of the largest data breaches in Ecuador's history. The silence from ANT is notable — and concerning.

Source: Teleamazonas