Overview
- A dataset advertised for 50,000 pesos allegedly contains personal and medical records of IMSS pensioners, according to cybersecurity sources.
- Analysts report the listing dates to August 9 and totals about 1.4 GB, a size they say could represent roughly 20 million records.
- Fields shown include full names, home addresses, CURP, Social Security numbers, birth dates, medical conditions and blood type.
- The seller is attributed by journalists and specialists to the group Sc0rp10nn, which has a track record of hacks confirmed by authorities in prior cases involving C5 Hidalgo and the Nuevo León prosecutor’s office.
- IMSS says its core systems were not breached, is working with authorities, and experts warn the data could enable identity theft, extortion and financial fraud.