In 2026 the Southern Cone did not suffer “another data breach.” It suffered the industrialization of identity.
While states issued the Protocol of Silence after TuID, Chronus, BHU and successive government dumps, a commercial platform quietly indexed more than 230 million citizen records from Argentina, Uruguay, Chile, Peru, Ecuador and Paraguay. Samaritan API (evolved from PampaLeaks’ original Argentina API) does not attack live systems. It queries static, already-exfiltrated databases and pipes the results into Google Maps and Street View. The output is no longer a spreadsheet. It is a geolocated, queryable human.
This talk is a forensic autopsy performed by the only independent researcher who:

forecasted major dumps days in advance (Predictor Protocol),
has been in direct communication with the operators,
documented how a 19-year-old Telegram bot reseller was used as theatrical “kingpin” while the real engine scaled,
and personally survived being the original scapegoat of Uruguay’s technically illiterate justice system in 2017.

Attendees will leave with:

The exact architecture that makes domain seizures and IP blocks irrelevant (local static repositories + 30+ endpoints + 130+ parameters).
Concrete examples of how a cédula + phone + address becomes an automated physical tracking package.
Why the “arrest” of peripheral actors accelerated rather than stopped the marketplace.
A defender and citizen playbook: treat all static PII as public, kill knowledge-based authentication, and replace institutional silence with radical transparency.

This is not a leak recap. It is the moment the Great Machine learned to hunt in meatspace — and the record of one sovereign node trying to break the loop before the next country is added.