CRIM exposed Social Security numbers of a million people in Puerto Rico

On July 9, 2026, Radio Isla reproduces an investigation by Luis Valentín, of the Centro de Periodismo Investigativo, and Nick McMillan, of ProPublica: the agency that collects property taxes inadvertently exposed the Social Security numbers of approximately a million people. The failure is tied to the Digital Cadastre interactive map, administered by the Municipal Revenue Collection Center. CPI and ProPublica notified the agency in mid-June.

The tool offers lot size, boundaries, value subject to tax, sale price, and owner. A simple search did not reveal sensitive information, but anyone who knew how websites request data could download Social Security numbers without a username or password. The reporters gave CRIM a detailed description, with the server name and the folders. Despite the notification, CRIM repeatedly denied problems. "After a review of the Digital Cadastre Platform, it was determined that there was NO vulnerability of taxpayers' confidential personal information, since the Digital Cadastre does NOT contain, nor display, that type of information," executive director Javier García Cintrón said. A few days later, CPI and ProPublica confirmed that the failures had been corrected. García denied that that had occurred because of their notice. The two layers stand. This magazine does not enter the server.

Radio Isla dates the send as July 10 in its template; the desk pick anchors the note on the 9th. The pick date is used. On July 29, NotiCel covered another CRIM act: it will identify owners of some 55,000 untaxed properties. A cybersecurity failure and an appraisal plan are two threads. The reader who wants the investigation has the Radio Isla URL at the foot.

Source: Radio Isla. https://radioisla.tv/crim-expuso-numeros-de-seguro-social-de-un-millon-de-personas-en-puerto-rico1/