IRON ATLAS

IRON ATLAS, operating publicly as IRON ATLAS NEW GENERATION (IANG), is an emerging Spanish-speaking hacktivist and data-exposure collective focused heavily on Colombia. Its official website frames the group as anti-corruption and anti-military abuse, while also advertising a mixed ecosystem of hacking, vulnerability research, data exposure, banking/cryptocurrency interests and allied channels.

The group has a stronger public evidentiary base than most emerging hacktivist brands. In March 2026, an independent investigation verified that a Colombian Ministry of Health SharePoint/API surface returned real affiliate data and extensive configuration metadata without authentication. This proves exposure and actor awareness, but not necessarily deep internal compromise.

In May 2026, the actor defaced the ELN’s online radio page. Independent source-code inspection found JavaScript injected into an AzuraCast public template that replaced visible content. The technique required file or template modification access, but it did not prove complete server or network takeover.

IRON ATLAS also maintains a clearweb organizational site, Telegram distribution, X/Instagram/Facebook accounts and an “expedientes” exposure function. Actor-controlled pages identify Import Request (@[redacted]) as leader and list several members and allies. These details are useful for identity resolution but remain self-reported.