Mexico probes possible Aeroméxico data exposure

Mexico’s Anti-Corruption and Good Government Ministry said it found signs of a possible exposure of personal data in a system that could be linked to Aeroméxico. The agency said it will carry out checks to determine what happened, under powers granted by Mexico’s Federal Law on Protection of Personal Data Held by Private Parties.

What is the Mexican authority investigating?

The Anti-Corruption and Good Government Ministry is reviewing two data-related fronts: a possible exposure in a system that could be linked to Aeroméxico, and an alleged offer of databases on Telegram. In both cases, the authority has not confirmed a definitive breach or identified the source of the information with certainty.

The first notice, reported by El Heraldo de México, said the ministry identified signs of a possible exposure and would carry out checks to determine the facts. Later reports described a broader investigation into the alleged sale or exposure of databases containing millions of personal records.

What is known about the Telegram offer?

Several outlets reported a Telegram post offering a database allegedly tied to Aeroméxico or to records taken from call centers, but the government has not confirmed that those files are authentic or who may have been responsible.

According to Yahoo News, the Mexican ministry described an offer containing more than 15 million records and a size of 1.10 GB, with fields that allegedly included names, email addresses, phone numbers, birth dates, and passenger registration dates. La Jornada said active monitoring detected an offer of more than 12.9 million records allegedly taken from various call centers.

El País also placed the alleged offer at nearly 13 million files and said they would include names, emails, mobile numbers, and banking information. XEVA added that the Mexican government had not determined who may have leaked the information, what its source was, or confirmed that the more than 12.9 million records offered on Telegram were authentic.

What is the scope of the investigation?

The available coverage shows the investigation has moved from a possible incident linked to Aeroméxico to a review of a much broader database offer. Infobae México reported that the ministry is investigating a possible exposure or sale of databases totaling more than 12.9 million personal records, although both the figure and the source are being reported as alleged.

On that point, the various reports agree on one central fact, the Mexican authority is still verifying the case and has not confirmed a breach attributed to any specific entity. For now, the picture described by the media is an ongoing investigation, with signs, Telegram-linked offers, and data whose origin has not yet been officially established.