Particle.news

Download on the App Store

Data on 20 Million IMSS Pensioners Posted for Sale on Dark Web

IMSS denies a hack, citing a likely internal leak under investigation.

Overview

  • Cybersecurity reporter Ignacio Gómez Villaseñor attributes the listing to the group Sc0rp10nn and reports the full dataset was offered for about 50,000 pesos, saying it may already have been sold.
  • NEKT Group says it found a 1.4 GB file consistent with roughly 20 million pensioner records and indicates the offer has been visible since August 9.
  • The exposed fields include full names, home addresses, CURP, Social Security numbers, dates of birth, medical conditions and blood type.
  • IMSS states there is no evidence of a breach of its systems and indicates preliminary findings point to misuse of institutional access by personnel, with authorities engaged to determine sanctions.
  • Experts warn the data could fuel identity theft, financial fraud and extortion schemes targeting pensioners as the records circulate and are resold.