Particle.news

Download on the App Store

Data of 20 Million IMSS Pensioners Offered on Dark Web as IMSS Denies Direct Breach

IMSS points to potential insider misuse under investigation.

Overview

  • A dataset advertised for 50,000 pesos allegedly contains personal and medical records of IMSS pensioners, according to cybersecurity sources.
  • Analysts report the listing dates to August 9 and totals about 1.4 GB, a size they say could represent roughly 20 million records.
  • Fields shown include full names, home addresses, CURP, Social Security numbers, birth dates, medical conditions and blood type.
  • The seller is attributed by journalists and specialists to the group Sc0rp10nn, which has a track record of hacks confirmed by authorities in prior cases involving C5 Hidalgo and the Nuevo León prosecutor’s office.
  • IMSS says its core systems were not breached, is working with authorities, and experts warn the data could enable identity theft, extortion and financial fraud.