Mapping Data Leaks in Peru's Government Sector: A Scalable Approach for Sector-Based Analysis

Salgado A. · Proceedings of 8th International Conference on Systems Engineering - Cybersecurity and AI: Building a reliable digital future, CIIS 2025 (2025) · DOI: 10.1145/3771678.3771691

Resumen

Data leaks are a threat that is increasing in the global digital world, and they are a concern in cybersecurity. Private or public companies are targets that they have exposed sensitive data, even government organizations.This study gathers, analyses and classifies user credentials. To achieve that, it has analyzed 6.1 TB (Terabytes) from collection data of public data leaks in telegram channels.The investigation was conducted using custom scripts in Python as a programming language that used keywords to obtain information in these channels, and it helped with data collection. This gathered information has a pattern called ULP (URL, Login, Password) from websites (URL), emails or users (Login) and passwords (Password). Then, the gathered information was cleaned using ULP format only to perform custom queries in sectors (e.g. government).The findings showed that the landscape in exposed data concerns government (.gob.pe) to public or private companies. Unlike in the use of data leaks platforms, they do not allow to access to the full datasets for analysis or sector classification. However, this study shows a methodology that helps you to collect and create your own dataset for custom queries, sector analysis and make decisions in cybersecurity.The results showed concerns about detection of data leaks in the emails government sector. It creates an urgent need to give importance to growing the problem of exposed data for avoiding information security incidents, as unauthorized access in systems or users exposed credentials in different sectors of country.

Instituciones: Universidad Nacional de Ingeniería