A threat actor has claimed to have breached Fianzas Avanza, a specialized surety and bonding company operating in Mexico. The actor alleges that they have successfully exfiltrated a significant volume of internal records and have posted the dataset for download on a dark web forum. The leak reportedly affects approximately 10,400 users associated with the firm.
According to the actor, the compromised dataset consists of 90,000 documents. Screenshots provided by the threat actor suggest the leak contains highly sensitive legal and financial documentation. The allegedly compromised data includes:
-
Articles of Incorporation (Acta Constitutiva) and Modification Acts
-
Credit Bureau Reports and authorizations for credit checks
-
Proof of Address documents (Comprobante de domicilio)
-
Tax Situation Certificates (Constancia de Situación Fiscal)
-
Bonding Contracts (Contrato afianzamiento)
-
Customer Identification Questionnaires
-
Personal Identification documents (e.g., Licenses/IDs)
-
Notarial Powers of Attorney (Poderes Notariales)
