A threat actor using the name "sqx" claims to have leaked 6 million records from CONAPE, the Dominican Republic's national council for older adults. According to the report, the dataset includes identification, medical, and pension information. The authenticity of the data has not been confirmed, and no official verification was included in the source reporting. Still, the claimed CONAPE data leak Dominican Republic story is worth understanding, because it shows why government-held records about seniors attract so much criminal interest.

What 'sqx' Claims Was Leaked

Based on the available reporting, the actor says the leaked material contains roughly 6 million records tied to CONAPE. The categories mentioned are ID data, medical data, and pension data. That is the extent of what has been publicly described.

Several important details remain unknown. The source does not confirm how the data was obtained, whether the records are genuine, how many unique individuals are involved, or whether the figure of 6 million includes duplicates. Claims like this are sometimes inflated or built from older, recycled data, and sometimes they turn out to be accurate. Until CONAPE or Dominican authorities respond, the responsible stance is to treat the claim as serious but unproven.

Why ID, Medical and Pension Data Is So Valuable to Criminals

Not all personal data is equally useful to fraudsters. A leaked password can be changed in minutes. A national ID number, a medical history, or a pension record cannot be changed so easily, which gives this type of data a long shelf life.

Here is why each category matters:

  • ID data: Names, ID numbers, and similar details can be used to impersonate someone, open accounts, or pass basic identity checks with banks and service providers.
  • Medical data: Health details can power convincing scams, such as a caller who appears to know a victim's condition or clinic. It can also be used for insurance or benefits fraud.
  • Pension data: Information about retirement payments helps criminals target the people who receive them, including attempts to redirect payments or trick recipients into "verifying" their details.

Combined in one dataset, these records let an attacker build a detailed profile of a person. That is what makes government-held health and benefits databases a high-value target. Older adults can also be more exposed to social engineering, since scammers often rely on urgency and authority, posing as a ministry, a pension office, or a hospital.

Government breaches follow similar patterns elsewhere. For context on how these incidents tend to unfold, see our coverage of how Thai authorities are tracing a government data leak and the Handala claim of a UAE government data breach. In both cases, early claims came before full confirmation, much like this one.

What Affected Seniors Should Watch For

If the data is real, the most likely harm is not a dramatic hack but a steady stream of targeted scams. Seniors and their families should be alert to:

  • Unexpected calls, texts, or WhatsApp messages claiming to be from CONAPE, a pension office, a hospital, or a bank, especially if they ask for ID numbers, codes, or payments.
  • Requests to "update" or "verify" pension details through a link or a phone call you did not initiate.
  • Messages that mention real personal details to seem legitimate. Knowing your name or ID number does not prove a sender is genuine.
  • Unfamiliar activity such as new accounts, loans, or changes to benefit payments.

A useful rule: if someone contacts you first and asks for sensitive information or money, stop and verify independently. Hang up and call the institution using a number from an official source you trust.

How to Monitor Accounts and Reduce Your Exposure

You cannot un-leak data, but you can limit what criminals can do with it.

  1. Review bank and pension statements regularly. Look for payments or changes you do not recognize and report them promptly.
  2. Turn on account alerts for transactions and login activity where your bank or provider offers them.
  3. Use strong, unique passwords and two-factor authentication on email and financial accounts. Email is often the key to resetting everything else.
  4. Be careful with links and attachments in messages that claim to relate to the leak. Fraudsters often exploit news of a breach.
  5. Ask a trusted relative to help older family members set up alerts and spot suspicious messages.
  6. Follow official channels for updates from CONAPE and Dominican authorities rather than relying on social media posts or forwarded messages.

A VPN does not protect against this kind of incident, since the data sits in an organization's systems rather than traveling over your connection. Good account hygiene and skepticism toward unsolicited contact are the stronger defenses here.

What This Means For You

If you or a relative receives CONAPE services, assume nothing is confirmed but prepare as though the claim could be true. The practical risk is phishing and impersonation, which you can counter by slowing down and verifying before acting. If you are outside the Dominican Republic, the lesson still applies: agencies that hold health and pension data are attractive targets, and an unverified claim today can become a confirmed incident later.

Key Takeaways

The claimed CONAPE data leak in the Dominican Republic remains unverified, but the response is the same either way: check your accounts, enable alerts, and treat unsolicited messages with suspicion. Share these steps with older relatives who may be targeted first. To see how similar government incidents develop, read our reporting on the Thailand government data leak and the Handala UAE breach claim, and watch for official statements from CONAPE as more information emerges.