A threat actor is claiming to sell a database containing sensitive information on over 8 million Mexican bank debtors. The actor alleges the database originates from “a group of collection agencies” in Mexico, which they claim to still have access to. The data for sale reportedly contains 8,029,963 lines covering the years 2023 to 2025.
According to the actor, the allegedly compromised data includes a wide range of personally identifiable information (PII) and financial details. The leak includes:
- Full name
- Full address
- Date of birth
- CURP (Clave Única de Registro de Población)
- Telephone number
- Bank
- Financial product
- Date of assignment of overdue portfolio
- Debt balance
