A Farmapatria leak indexed by leaksear.ch contains 3,178,453 records tied to vaccination and identity data for the Venezuelan state-run pharmacy network, which Farmapatria describes as a state company attached to Venezuela's Ministry of Health since May 2019 (www.farmapatria.org). The breach date in the indexing metadata is April 1, 2026, and the searchable fields include address, country, date of birth, email, name, phone, and username (leaksear.ch metadata).
What happened
Public breach reporting on this incident is limited. Lunar's breach catalog says farmapatria.com.ve appears in breach aggregation databases as a leak file advertised around roughly 3 million Venezuelan citizen records, and says no official disclosure or detailed incident report was located, leaving the attack vector, threat actor, and response unconfirmed (lunarcyber.com).
The same Lunar page lists 963.3k affected accounts, while the leaksear.ch-indexed dataset contains 3,178,453 records (leaksear.ch metadata). Because those figures are not defined the same way in the public source, the 3.18 million figure in this article refers to indexed records, not a confirmed count of unique people.
Farmapatria's public site says the pharmacy network was created to provide access to medicines at fair prices, and its organization page says the company was formalized in 2012 and later attached to the Ministry of Health (www.farmapatria.org, www.farmapatria.org).
What data was exposed
The leaksear.ch indexing metadata lists address, country, date of birth, email address, name, phone number, and username as searchable fields in the Farmapatria dataset (leaksear.ch metadata).
The same metadata also records additional, non-searchable fields related to vaccination and identity context, including health center, dose information, dose dates, vaccine name, vaccine lot identifiers, workplace, ethnicity, indigenous community indicators, sex, identification type, and an id field (leaksear.ch metadata). No raw sample records are included here.
Why this matters
The combination of contact details, dates of birth, addresses, and vaccination-related attributes can support convincing phishing, impersonation, and social-engineering attempts that reference public-health services or medication access. The presence of identity and demographic fields also raises fraud and privacy risks for affected individuals, particularly if attackers combine the data with other exposed Venezuelan datasets. Security teams should monitor for lures using Farmapatria, vaccination, medicine distribution, or public-health benefit themes. Readers who may be affected should check their exposure in the Farmapatria leak through leaksear.ch.
Check your exposure
Vetted researchers and incident-response teams can request access or sign in if they already have access to check this dataset. Searchable pivots for this leak include address, country, date of birth, email, name, phone, and username.