Story perspectives

CRIM exposes 1 million SSNs, denies breach notification.

7/10/2026

Summary

Story summary

The Municipal Revenue Collection Center (CRIM) in Puerto Rico exposed about one million Social Security numbers via its Catastro Digital map, which was patched after notification.
Audits reveal that despite Puerto Rico’s 2024 Act 40, most agencies lack cybersecurity safeguards, prompting expert Carlos Pérez to urge employee training and multifactor authentication.
CRIM denied any breach and refused to notify affected individuals, while private real-estate firms could have harvested the exposed numbers.

1 of 1

Story summary

The Municipal Revenue Collection Center (CRIM) in Puerto Rico exposed about one million Social Security numbers via its Catastro Digital map, which was patched after notification.
Audits reveal that despite Puerto Rico’s 2024 Act 40, most agencies lack cybersecurity safeguards, prompting expert Carlos Pérez to urge employee training and multifactor authentication.
CRIM denied any breach and refused to notify affected individuals, while private real-estate firms could have harvested the exposed numbers.