Dominican Republic COVID-19 Vaccination Data Breach 2022
The national COVID-19 vaccination tracking registry (VacúnateRD) managed by the Dominican Republic's Ministry of Public Health (Ministerio de Salud Pública - MSP) was compromised, resulting in the unauthorized exfiltration and publication of citizen immunization data across cybercrime repositories.
Exposed Data Types
1 sensitive6- Health records
- Government issued IDs
- Names
- Dates of birth
- Genders
- Geographic locations
About This Record
The exfiltrated database encompasses records for approximately 820,000 individuals, prominently featuring minors under the age of 18 (Phase IVB). Compromised data fields include citizen national identity card numbers (Cédula), full names, dates of birth, genders, municipal districts, vaccination card tracking serials, administering health clinic or educational facility names, dose numbers, vaccination dates, pharmaceutical manufacturers (Pfizer-BioNTech, Sinovac CoronaVac), and batch/lot numbers.
Because the exposure pairs statutory government identification numbers with personal medical histories and demographic data of underage citizens, it presents severe risks to medical confidentiality, potential identity exploitation, and targeted phishing targeting family units.
Citizens of the Dominican Republic are advised to verify official communications through designated government channels and remain vigilant against social engineering exploiting healthcare status.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
