Weaponizing Gym Records Against State Secrets (The BHU Cyber Crisis) Banco Hipotecario del Uruguay data breach by Crypto24

Weaponizing Gym Records Against State Secrets (The BHU Cyber Crisis) Banco Hipotecario del Uruguay data breach by Crypto24

Author: Alberto Daniel Hill September 17, 2026 Duration: 39:01



Episode Summary: When state bank executives classified all technical details of a catastrophic 700 GB ransomware breach under a 15-year confidentiality decree, they assumed the narrative was sealed until 2041. They didn't count on the exfiltrated files containing something they couldn't legally classify: sensitive health and medical records from the bank's sports club, Club BHU.

This episode traces the exact mechanics of a legal and forensic pincer strategy—turning unencrypted sports club fitness files into a high-leverage tool to dismantle institutional opacity across Montevideo, Rome, and Brussels.

Key Timestamps / Topics Covered:

  • 00:00 — Introduction: The Anatomy of a 700 GB State Bank Leak
  • 03:15 — The Discovery: Medical & Fitness Files inside \\Server\Comun\...
  • 08:30 — Legal Analysis: Law 18.331, GDPR Art. 9, and the 15-Year Secrecy Decree
  • 14:20 — Serving the 5-Day Statutory Clock on BHU & Club BHU
  • 19:45 — The SMTP 550 Bounce: When the Data Protection Authority Shuts its Doors
  • 25:10 — The Rome Pincer: Filing Segnalazione ex Art. 144 with the Italian Garante
  • 31:00 — Why Uruguay's $2.2B Tech Export Industry is Now on the Line
  • 36:30 — Conclusion & What Happens When the 5-Day Deadline Hits Zero

Documentation & Public Records:

  • PGP Key ID: 0xA1406A6E117EF283
  • Fingerprint: 6B33 A7C8 E94B 8D9C 4E54 03DE A140 6A6E 117E F283
  • Hashes & Archives: All filings PGP-signed and verified on the public record.


Alberto Daniel Hill hosts Cybermidnight Club-Hackers, Cyber Security and Cyber Crime, a podcast that exists at the raw intersection of digital crime and personal consequence. His authority comes from a unique and grim distinction: as an expert in cybersecurity, he also became the first person in Uruguay to serve a prison sentence for a computer-related crime-one he maintains he did not commit, an offense that may be entirely fictional. This lived experience, shadowed by ambiguity and the weight of the state, fuels every conversation. The series moves beyond theoretical discussions to explore the real human stories and systemic flaws within the shadowy realms of hacking, security failures, and cyber crime. Listeners are taken into operations on the dark web, not through sensationalism, but through the lens of someone who has navigated its myths and realities from both sides of the law. The podcast naturally unfolds with interviews, analysis, and Hill’s own reflections, offering a grounded perspective that challenges easy narratives about guilt, technology, and power. It’s a detailed audit of the digital underworld, conducted by a guide who understands the cost of a single line of code or a misplaced accusation. You’ll hear about vulnerabilities, both in systems and in justice, making this a essential series for anyone intrigued by the true crime of the modern age, where the evidence is often ephemeral and the stakes are profoundly human.
Author: Language: English Episodes: 50

Cybermidnight Club– Hackers, Cyber Security and Cyber Crime
Podcast Episodes
La venganza criptográfica de Alberto Daniel Hill [not-audio_url] [/not-audio_url]

Duration: 1:04:12
La venganza criptográfica de Alberto Daniel Hill,**Operativos / caso** `#CiberseguridadUY` `#AGESIC` `#CERTuy` `#TransparenciaRadical` `#OpSecFails` `#MGAP` `#SNIG` `#DFIR` `#GnuPG` `#Transparencia` `#SeguridadDigital` `…
The Cryptographic Siege of Alberto Daniel Hill [not-audio_url] [/not-audio_url]

Duration: 31:50
The_Cryptographic_Siege_of_Alberto_Hil**Operativos / caso** `#CiberseguridadUY` `#AGESIC` `#CERTuy` `#TransparenciaRadical` `#OpSecFails` `#MGAP` `#SNIG` `#DFIR` `#GnuPG` `#Transparencia` `#SeguridadDigital` `#Cibersegur…
La ecuación que desenmascaró al Estado uruguayo [not-audio_url] [/not-audio_url]

Duration: 31:50
La ecuación que desenmascaró al Estado uruguayo**Operativos / caso** `#CiberseguridadUY` `#AGESIC` `#CERTuy` `#TransparenciaRadical` `#OpSecFails` `#MGAP` `#SNIG` `#DFIR` `#GnuPG` `#Transparencia` `#SeguridadDigital` `#C…
Forensic Audit and Integrity Report of CERT.uy Email Correspondence [not-audio_url] [/not-audio_url]

Duration: 7:31
Forensic Audit and Integrity Report of CERT.uy Email Correspondence**Operativos / caso** `#CiberseguridadUY` `#AGESIC` `#CERTuy` `#TransparenciaRadical` `#OpSecFails` `#MGAP` `#SNIG` `#DFIR` `#GnuPG` `#Transparencia` `#S…
Jaque mate criptográfico al Estado uruguayo [not-audio_url] [/not-audio_url]

Duration: 22:29
Jaque mate criptográfico al Estado uruguayo**Operativos / caso** `#CiberseguridadUY` `#AGESIC` `#CERTuy` `#TransparenciaRadical` `#OpSecFails` `#MGAP` `#SNIG` `#DFIR` `#GnuPG` `#Transparencia` `#SeguridadDigital` `#Ciber…
Jaque mate criptográfico al Estado uruguayo [not-audio_url] [/not-audio_url]

Duration: 12:04
Jaque mate criptográfico al Estado uruguayo**Operativos / caso** `#CiberseguridadUY` `#AGESIC` `#CERTuy` `#TransparenciaRadical` `#OpSecFails` `#MGAP` `#SNIG` `#DFIR` `#GnuPG` `#Transparencia` `#SeguridadDigital` `#Ciber…
Ciberdelincuencia de Estado y fraude forense [not-audio_url] [/not-audio_url]

Duration: 30:15
Ciberdelincuencia de Estado y fraude forense**Operativos / caso** `#CiberseguridadUY` `#AGESIC` `#CERTuy` `#TransparenciaRadical` `#OpSecFails` `#MGAP` `#SNIG` `#DFIR` `#GnuPG` `#Transparencia` `#SeguridadDigital` `#Cibe…
How Alberto Hill Cornered Uruguay [not-audio_url] [/not-audio_url]

Duration: 43:44
How Alberto Hill Cornered Uruguay**Operativos / caso** `#CiberseguridadUY` `#AGESIC` `#CERTuy` `#TransparenciaRadical` `#OpSecFails` `#MGAP` `#SNIG` `#DFIR` `#GnuPG` `#Transparencia` `#SeguridadDigital` `#Ciberseguridad`…