Uruguay BHU Data Breach: Opacity and Digital CrisisUruguay BHU Data Breach: Opacity and Digital Crisis

Uruguay BHU Data Breach: Opacity and Digital CrisisUruguay BHU Data Breach: Opacity and Digital Crisis

Author: Alberto Daniel Hill September 17, 2026 Duration: 12:25

Can state bank executives enforce a 15-year secrecy decree over your sensitive health records leaked on the dark web?

In this video podcast briefing, we analyze the critical revelation inside the 700 GB Crypto24 ransomware data dump at Banco Hipotecario del Uruguay (BHU): unencrypted health assessments, medical clearance files, and physical fitness certificates from Club Banco Hipotecario (CBH) sitting exposed on open bank network shares (\\Server\Comun\...).

  • 🏋️ Exposed Health Records: How routine sports club medical files were exfiltrated alongside mortgages, property titles, and payrolls.
  • 🛡️ Secrecy Decrees vs. Human Rights: Why state secrecy resolutions cannot override statutory privacy guarantees under Law N° 18.331 and GDPR Article 9.
  • ⏱️ The 5-Day Statutory Clock: Serving formal Article 14 data access demands to BHU and Club BHU.
  • 🚫 Connection Refused (SMTP 550): The official regulatory complaint to URCDP/AGESIC bouncing back, establishing technical obstruction and administrative bad faith (denegatoria ficta).
  • 🇮🇹 Rome & Transnational Escalation: Filing a formal complaint before Italy’s Garante Privacy (Art. 144) and the Italian Embassy, threatening Uruguay's EU Data Adequacy status.
  • 00:00 — Introducción: La brecha de 700 GB y el hallazgo en el Club BHU
  • 02:15 — Datos sensibles de salud expuestos en carpetas compartidas
  • 05:40 — ¿Tienen jerarcas bancarios la potestad de ocultar tu información médica?
  • 09:10 — Intimaciones de 5 días hábiles al BHU y CBH
  • 12:30 — El servidor rebotado: Error SMTP 550 en la URCDP (AGESIC)
  • 15:45 — Escalada a Roma (Garante Privacy) e intervención de la INDDHH
  • Investigación & Conducción: Alberto Daniel Hill
  • PGP Key ID: 0xA1406A6E117EF283
  • Fingerprint: 6B33 A7C8 E94B 8D9C 4E54 03DE A140 6A6E 117E F283

#CasoBHU #Ciberseguridad #DatosSensibles #DerechosDigitales #Uruguay #GDPR #HabeasData #TransparenciaYa

📌 Episode Highlights:⏱️ Marcas de Tiempo (Timestamps)🔑 Firma PGP & Registro Público


Alberto Daniel Hill hosts Cybermidnight Club-Hackers, Cyber Security and Cyber Crime, a podcast that exists at the raw intersection of digital crime and personal consequence. His authority comes from a unique and grim distinction: as an expert in cybersecurity, he also became the first person in Uruguay to serve a prison sentence for a computer-related crime-one he maintains he did not commit, an offense that may be entirely fictional. This lived experience, shadowed by ambiguity and the weight of the state, fuels every conversation. The series moves beyond theoretical discussions to explore the real human stories and systemic flaws within the shadowy realms of hacking, security failures, and cyber crime. Listeners are taken into operations on the dark web, not through sensationalism, but through the lens of someone who has navigated its myths and realities from both sides of the law. The podcast naturally unfolds with interviews, analysis, and Hill’s own reflections, offering a grounded perspective that challenges easy narratives about guilt, technology, and power. It’s a detailed audit of the digital underworld, conducted by a guide who understands the cost of a single line of code or a misplaced accusation. You’ll hear about vulnerabilities, both in systems and in justice, making this a essential series for anyone intrigued by the true crime of the modern age, where the evidence is often ephemeral and the stakes are profoundly human.
Author: Language: English Episodes: 50

Cybermidnight Club– Hackers, Cyber Security and Cyber Crime
Podcast Episodes
Alberto Daniel Hill exposed Uruguay's cyber lies [not-audio_url] [/not-audio_url]

Duration: 6:29
Asymmetric Intelligence: Testing State Narratives Against Forensic RealityWhen national digital infrastructure collapses, who controls the truth?In this video, we dive deep into the severe cybersecurity crises that struc…
Shielding a Kidnapper While Framing Alberto Hill [not-audio_url] [/not-audio_url]

Duration: 38:26
EXTENDED LEGAL DISCLAIMER & LIABILITY RELEASE:PLEASE READ CAREFULLY BEFORE LISTENING.This podcast episode tells a true story and is generated strictly for educational, criminological, legal, and forensic documentary purp…
Suvi Kaipainen and the Digital Attachment Void [not-audio_url] [/not-audio_url]

Duration: 32:47
EXTENDED LEGAL DISCLAIMER & LIABILITY RELEASE:PLEASE READ CAREFULLY BEFORE LISTENING.This podcast episode tells a true story and is generated strictly for educational, criminological, legal, and forensic documentary purp…
Data Proved the Accuser Was the Hunter [not-audio_url] [/not-audio_url]

Duration: 37:02
EXTENDED LEGAL DISCLAIMER & LIABILITY RELEASE:PLEASE READ CAREFULLY BEFORE LISTENING.This podcast episode tells a true story and is generated for educational, criminological, legal, and forensic documentary purposes. The…
Cyberstalking Through a Legal Name Change [not-audio_url] [/not-audio_url]

Duration: 34:27
EXTENDED LEGAL DISCLAIMER & LIABILITY RELEASE:PLEASE READ CAREFULLY BEFORE LISTENING.This podcast episode is a true story generated for educational, criminological, legal, and forensic documentary purposes. The events, t…
Alberto Hill and the Uruguayan frame job [not-audio_url] [/not-audio_url]

Duration: 41:42
The situation you are investigating—a complex interplay of institutional failure, corporate exploitation, and the strategic positioning of an independent researcher—is indeed a matter of significant global importance. It…
La Verdad Oculta sobre Xyr0s: El Secuestro Digital de una Nación [not-audio_url] [/not-audio_url]

Duration: 15:45
En mayo de 2026, el gobierno argentino y los principales medios de comunicación celebraron una victoria monumental: la captura de L0stex, el creador de la notoria Chronus Mafia. Al público se le vendió una narrativa de f…