Discovered my private information (tax ID, home address, phone) on a Telegram search bot

Hello everyone,

I’m posting from Brazil and discovered something disturbing today. There’s this Telegram bot called DataSearch_bot that displays my complete personal details when someone searches for me.

The bot shows my complete name, tax identification number, home address, and mobile number. I’m completely confused about how they got this information. I’ve always been careful about sharing personal details online and I don’t recall being involved in any security incidents.

This bot functions similar to a lookup tool. You type in someone’s name, tax ID, or phone digits and it returns matching profiles with surprisingly precise information. The bot provides some details without charge but requires payment to unlock everything.

I decided to search for myself and was horrified to find all my information displayed there. This doesn’t seem like typical web scraping activity - it appears they have access to genuine leaked databases.

My main concerns:

  • Has anyone in cybersecurity encountered similar bots?
  • Could this be connected to any recent Brazilian data incidents?
  • What’s the best way to file complaints or take action about this?
  • Are there any protection services available for situations like this?

You can find this bot by searching “DataSearch_bot” directly in Telegram (avoiding direct links due to potential filtering).

Moderators: please approve this post if it gets caught in filters.

Appreciate any help.

This kind of data exposure has gotten crazy common in Brazil lately. I work in IT security and we’ve dealt with tons of major breaches hitting Brazilian citizens - the Serasa thing in 2021, government databases getting compromised, millions of CPF numbers and personal info leaked. For your situation, file a complaint with ANPD right away through their website. They handle LGPD violations and can go after data brokers using Brazilian citizen info. Also report it to Federal Police’s cybercrime division - they deal with unauthorized data sales. Protect yourself now: register with CPF fraud prevention through Receita Federal and set up banking alerts. Screenshot everything from that bot before it disappears. The bot probably got your data from one of those big breaches, not by targeting you directly, but it’s still serious.

I’ve dealt with these data exposure problems at work for years. Filing manual complaints and waiting for authorities? Painfully slow and usually doesn’t work.

You need continuous monitoring with automated responses. I built a system using Latenode that watches multiple data sources, Telegram channels, and breach databases for employee info. When it finds exposed data, it auto-generates reports, sends alerts, and submits takedown requests.

You can automate the whole protection workflow. Monitor dark web sources, track when your data shows up, auto-screenshot evidence, and batch complaints to ANPD and other authorities. Even set up monitoring for new Telegram bots with similar functions.

Skip manually checking if your data’s exposed somewhere - let automation handle it. Run 24/7 workflows that scan for your info across platforms and databases. Something gets found? Instant alerts with all the documentation you need for legal action.

This beats scrambling after you discover your data’s already out there. The system pays for itself by catching exposures early and automating the tedious complaint stuff.

I experienced something similar months ago with another bot that was eventually taken down. It seems like this new bot is pulling data from the well-known Serasa breach from 2021, mixed with more recent telecom leaks. These bots pull information from multiple sources, including credit bureaus and government databases, so it’s not uncommon to find such detailed personal data.

For action in Brazil, I recommend filing a complaint with the ANPD via their official website since they are actively addressing LGPD violations. Additionally, reach out to the Federal Police’s cybercrime unit and report the bot to Telegram’s abuse system as well. Although Serasa offers monitoring services, it’s essential to focus on your immediate security measures: update your passwords, enable two-factor authentication, and consider changing your phone number. While you can’t change your CPF, keeping a close watch for any unusual activity is crucial.

This is happening way too often in Brazil now. My company’s security team found employee data floating around Telegram channels last year - same exact thing. That bot you found is probably tied to all those massive breaches we’ve had here, hitting government systems and telecom companies. I’ve dealt with this professionally, so here’s what works: File a complaint with ANPD through their official portal. Screenshot everything from that bot first - these things disappear fast. Also report it to Federal Police’s cybercrime division since they’re making money off your data. Those Brazilian data monitoring services exist, but honestly? Once you’re in these databases, you’re in. Your best bet is changing your phone number if you can and watching out for phishing attempts. Criminals love using this stuff for social engineering attacks.

omg that’s so scary! I’ve heard of similar bots too, they dig up old leaks. I agree, def report it to ANPD, they might help. Also, check haveibeenpwned to see if your info got leaked somewhere else.