{
	"id": "b5cef2e8-3b92-4d44-9d1e-7180684c2608",
	"created_at": "2026-04-06T00:15:01.218694Z",
	"updated_at": "2026-04-10T03:24:18.693661Z",
	"deleted_at": null,
	"sha1_hash": "5f6cc36aab78512c5f32a020cd5a85212b1a4dc2",
	"title": "Environmental hacktivists publish 2 terabytes of mining company emails",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 35106,
	"plain_text": "Environmental hacktivists publish 2 terabytes of mining company\r\nemails\r\nBy AJ Vicens\r\nPublished: 2022-08-03 · Archived: 2026-04-05 12:58:11 UTC\r\nA hacktivist collective posted more than 2 terabytes of hacked emails and files from a host of mining companies in\r\nCentral and South America on Wednesday, in a move to apparently expose environmental damage in the region.\r\nThe group — which calls itself Guacamaya, named for a type of bird — posted the files from five public and\r\nprivate mining companies and two public agencies responsible for environmental oversight, one in Colombia and\r\nthe other in Guatemala. The material was posted to a website called Enlace Hacktivista, a site for documenting\r\nhacker history, sharing educational resources, and that provides space “for hackers to publish their hacks, leaks,\r\nand communiques.”\r\nIn a Spanish-language statement posted with the materials, the group decried what it described as environmental\r\ndevastation at the hands of U.S. and other international governments and firms that plunder the region’s resources.\r\n“All we really want, as our own mother warns us, is for this to stop,” the statement read, according to a Google\r\ntranslation. “We want them to stop, to stop once and for all exploiting, mining, polluting, that desire for\r\ndominance.”\r\nThe materials come from ENAMI, an Ecuadorian state mining company; the Agencia Nacional de Hidrocarburos\r\n(ANH) in Colombia; New Granada Energy Corporation in Colombia; Quiborax, a mining company in Chile;\r\nOryx, an oil company in Venezuela; Tejucana, a Brazilian mining company; and Guatemala’s Ministerio De\r\nAmbiente y Recursos Naturales.\r\nDDoSecrets, a transparency advocacy website that also hosts hacked materials in the public interest, published a\r\nrelease on the files simultaneously Wednesday.\r\nGuacamaya, in March, released 4.2 terabytes of hacked material from mining subsidiaries of a Swiss investment\r\ngroup that detailed the companies’ apparent pollution in Guatemala. The files became part of a massive reporting\r\nproject involving 65 journalists around the world that exposed not only proof of pollution, but efforts to\r\nmanipulate local governments and surveillance of journalists.\r\nAfter that hack, the group posted a video detailing how they accessed the systems and stole the files and emails.\r\nThey also gave an interview talking about why they’re going after these companies to Forbidden Stories, the\r\norganization that coordinated and published a series of stories based on the documents.\r\n“The role of a hacker is to take part in the different forms of resistance in any territory where there is dignified\r\nrage and a joyful desire for radical revolution,” they said.\r\nhttps://cyberscoop.com/environmentalist-hacktivist-collective-mining-company/\r\nPage 1 of 2\n\nSource: https://cyberscoop.com/environmentalist-hacktivist-collective-mining-company/\r\nhttps://cyberscoop.com/environmentalist-hacktivist-collective-mining-company/\r\nPage 2 of 2",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"Malpedia",
		"MISPGALAXY"
	],
	"references": [
		"https://cyberscoop.com/environmentalist-hacktivist-collective-mining-company/"
	],
	"report_names": [
		"environmentalist-hacktivist-collective-mining-company"
	],
	"threat_actors": [
		{
			"id": "ae7c5e09-a79b-4dae-8ed3-f288b8d99810",
			"created_at": "2023-11-08T02:00:07.110982Z",
			"updated_at": "2026-04-10T02:00:03.416181Z",
			"deleted_at": null,
			"main_name": "Guacamaya",
			"aliases": [],
			"source_name": "MISPGALAXY:Guacamaya",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		}
	],
	"ts_created_at": 1775434501,
	"ts_updated_at": 1775791458,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/5f6cc36aab78512c5f32a020cd5a85212b1a4dc2.pdf",
		"text": "https://archive.orkl.eu/5f6cc36aab78512c5f32a020cd5a85212b1a4dc2.txt",
		"img": "https://archive.orkl.eu/5f6cc36aab78512c5f32a020cd5a85212b1a4dc2.jpg"
	}
}