Mexico probes Aeromexico-linked data leak

Mexico’s Secretariat of Anti-Corruption and Good Government opened an ex officio investigation into a possible data leak linked to Aeromexico after detecting a Telegram post on September 18, 2026 that appeared to show a database attributed to the airline. According to EFE, the file would contain more than 15 million records and weigh 1.10 GB. Aeromexico said it is reviewing the authenticity of the database and, so far, has not identified exposure of financial information, payment card data or customer passwords, including Aeromexico Rewards accounts.

What did the Mexican authority find?

The federal agency detected signs of a possible exposure of personal data in a system that could be related to Aeromexico, and began active cyber monitoring based on that finding. According to EFE, the Secretariat is also analyzing the data obtained to open an ex officio case that would determine alleged responsibility for the compromised databases.

El Imparcial reported that the government is reviewing a sample of 100,000 records and that the investigation is tied to a possible leak of more than 15 million passenger records offered on Telegram. Puente Libre also reported that the inquiry is based on a sample of 100,092 records allegedly linked to Aeromexico.

What did Aeromexico say?

Aeromexico said it opened its own investigation to verify the authenticity of the customer database, determine its origin and establish the scope of any possible impact. In the reports cited, the airline said that, based on the information available, it has not identified exposure of financial information, payment card data or customer passwords.

The company also said the incident has not affected its operations and that it will cooperate with authorities. It added that customers should stay alert for unusual emails, messages or calls asking for personal or financial information, and avoid responding to atypical communications requesting sensitive or banking data.

What preventive measures were recommended?

The Mexican reports consulted agree on a set of basic steps for users who may be affected by a leak of this kind. These include enabling two-factor authentication, not reusing passwords, being cautious with messages that ask for personal data and checking alerts for banking activity.

Tribuna de México added that the Secretariat is examining a possible violation of the Federal Law on Protection of Personal Data Held by Private Parties. For now, the case remains under official investigation and the airline continues its internal review of the authenticity of the supposed file circulated on Telegram.