Mexico probes sale of 12.9 million records

Mexico’s Secretariat of Anti-Corruption and Good Government is investigating the alleged sale of more than 12.9 million records containing personal data linked to several call centers. The authority found a Telegram post, circulated on Sept. 22, in which a user offered databases allegedly stolen from call centers operating in Mexico. The investigation remains open to determine where the data came from and who may be responsible for exposing it and putting it up for sale.

What did the Mexican authority detect?

The Secretariat opened the case on its own after monitoring Telegram, according to N+, to clarify the origin of the databases and any possible responsibility behind their spread. Available coverage agrees that the finding began with an offer posted on that platform, not with a public confirmation of a specific intrusion.

Forbes México said the described information includes full names, email addresses, phone or mobile numbers, dates of birth, RFC tax IDs, home addresses and, in some cases, banking details. That level of detail widened the scope of the case, although the sources consulted have not yet confirmed that the entire set is authentic or that it came from a single incident.

What data appeared in the offer?

Descriptions published by the media indicate that the files on offer brought together personal data from different databases and, in some cases, banking information. El Financiero reported that the investigation would be linked to databases attributed to 23 companies, in addition to the various call centers mentioned by the Secretariat.

Radio Fórmula added that the Secretariat of Anti-Corruption obtained a sample of 13,000 records from 13 different databases for analysis, a step meant to verify the actual composition of the exposed material. Publimetro, for its part, said the files on offer were associated with databases identified by commercial names of banks, department stores, digital platforms and other companies, although that attribution comes from the description of the offer and does not prove a breach at those firms.

Is the origin of the records confirmed?

No, the investigation is still open and there is still no official confirmation of the data’s origin or the full authenticity of the database. Xataka México noted that the goal remains to determine where the records came from, without identifying a company as responsible in its coverage or treating the full set of information offered on Telegram as valid.

With the material available, the case remains an inquiry into the alleged sale of databases linked to call centers in Mexico, with personal data and, in some cases, banking details, but without a closed attribution for the source of the leak.