Qilin exposed three Mexican companies
ACSec identified Victoria water utility, MCM Telecom and Price Shoes as Mexican victims disclosed by Qilin.
ACSec identified the Commission for Water and Sewer Services of Victoria, MCM Telecom and Price Shoes as Mexican victims disclosed by Qilin. The first is classified under energy and utilities, the second under technology, and Price Shoes appears with a discovery date of August 9, 2026.
ACSec identified the Commission for Water and Sewer Services of Victoria, MCM Telecom and Price Shoes as Mexican victims disclosed by Qilin. The water utility is classified in the energy and utilities sector, MCM Telecom is listed under technology, and Price Shoes has a discovery date of August 9, 2026.
Which Mexican victims appear in Qilin's record?
ACSec listed the Commission for Water and Sewer Services of Victoria, MCM Telecom and Price Shoes as Mexican victims disclosed by Qilin. In the case of the water commission, the observatory placed it in energy and utilities, while MCM Telecom was classified in technology. Price Shoes appears with a discovery date of August 9, 2026.
ACSec's publication does not include additional technical details about the incident in the material provided, and it does not allow independent confirmation of the mechanisms used by the group in these cases. It does, however, document the attribution of the victims and the disclosure recorded in its observatory.
What was reported about J Group in Mexico?
Infobae Mexico reported that, during the first weeks of October 2026, the ransomware group J Group circulated a package that would contain 359 gigabytes and 471,009 documents from AYM. The same coverage said AYM has contractual ties to Pemex, the SAT and the CFE, and a possible link to Cenagas.
That material was presented by the news coverage as a leak attributed to J Group, but the information available for this note does not allow independent confirmation of the package contents or a technical breakdown of the incident's TTPs. The verifiable data in the source is the attributed disclosure, the volume cited, and the contractual relationship Infobae Mexico assigned to AYM with federal agencies and a possible connection to Cenagas.
Sources
- Qilinransomware.academia-ciberseguridad.com· ACSec Observatorio Ransomware
- A merced del cibercrimen: el gobierno sigue sin responder ante las filtracionesinfobae.com· Infobae México



