Yucatán investigates leak of thousands of documents

Local media in Yucatán are reporting a possible cyberattack against the state government, linked to the leak of information from its databases. The authenticity and scope of that material have not been officially confirmed. Another local report says state authorities or internal units are already investigating the possible leak of thousands of documents.

What may have been leaked?

According to Yucatán a la Mano, citing cybersecurity specialist Víctor Ruiz, the alleged attacker claims to have obtained about 30 gigabytes of information from the Yucatán government, equal to roughly 50,000 institutional documents. The same report says the supposed access was demonstrated with an initial compressed package of about 2.91 gigabytes containing around 5,000 PDF files.

Among the documents reportedly obtained are birth certificates, CURP records, addresses, and other official records from state government offices. The publication also notes that it has not yet been confirmed whether personal data belonging to residents was exposed, or what the real scope of the extraction was.

What other coverage mentions it?

Sol Yucatán also published a report on the case and repeated the claim of a leak of roughly 30 gigabytes of information tied to the Yucatán government, along with an initial sample of about 2.91 GB and 5,000 PDF documents. That coverage stressed that there was still no official confirmation and that it could not be assumed the entire database offered actually corresponded to Yucatán's registry.

A specialized Pulse brief on kalir.io also referred to the free publication on the dark web of a leak titled "MX | YUCATAN DOCUMENTS," which appears to contain documents from the Mexican state government. The report warned that this type of official file can enable identity fraud, social engineering, and further intrusions against public agencies.

Was there an official response?

As of Yucatán a la Mano's report, the Government of the State of Yucatán had not issued any public official statement about the alleged incident. iNoticias later reported that state authorities or internal units were investigating the possible leak, although they still had not confirmed the authenticity or true scope of the material.