Inter Rapidísimo Alleged Data Exposure
The 2026 Inter Rapidísimo data breach occurred in February 2026 when the internal GLPI IT service desk and identity database of Inter Rapidísimo (interrapidisimo.com), Colombia's premier logistics, courier, and freight transportation carrier, was compromised and leaked on BreachForums by the threat actor 'Typical_Idiot'.
Exposed Data Types
7- Email addresses
- Usernames
- Passwords
- Phone numbers
- Names
- National ID numbers
- System activity logs
About This Record
What information was affected in the Inter Rapidísimo incident?
The leaked SQL database dump (intrrapidismo.sql) encompasses 661,126 employee, courier agent, and IT operator accounts, exposing:
- Identity & Personnel Identifiers: First and last names, system login usernames, and Colombian national identity card numbers (cédula / registration_number).
- Authentication Credentials: Bcrypt ($2y$) and SHA-1 password hashes, personal API tokens, and session cookies.
- Contact & Physical Workplaces: Mobile and telephone numbers, service point branch locations (locations_id), and departmental cost centers.
- Internal Directory Infrastructure: Active Directory LDAP Distinguished Names (
user_dn: CN=...,OU=tecnologia,DC=interrapidisimo,DC=local). - Email Addresses: Canonical email identifiers for 76 unique operator and department contact records.
How many accounts were affected?
Out of 661,126 personnel and operational records, canonical RFC extraction verified 76 unique valid email addresses.
Technical analysis and security risks
The exposure of national identity numbers alongside active directory internal domain trees provides cybercriminals with intelligence for spear phishing, business email compromise (BEC), and unauthorized credential attacks against logistics endpoints.
Recommended actions for affected individuals
Company personnel and logistics agents should:
- Immediately update account passwords across corporate and auxiliary services.
- Enforce mandatory multi-factor authentication (MFA) across all remote access and VPN endpoints.
- Remain vigilant against fraudulent SMS or phone solicitations masquerading as corporate logistics commands.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
