Overview
- The contract for the Registro de Proveedores para la Integridad was formally rescinded after a process that began on July 2 and was completed on July 30, 2026.
- Officials say NECSUS and Creaciones Tecnológicas y Digitales Jim transferred contractual duties and gave confidential IMSS supplier data to UPAX GS without IMSS consent, including information used for domiciliary verifications.
- IMSS technology teams held August meetings with the providers to define a secure transfer, migration and restitution plan and to demand delivery of databases, documentation and technology components.
- The IMSS Órgano Interno de Control opened an investigation on July 14 to assign administrative responsibility, and the Secretaría Anticorrupción y Buen Gobierno has signaled tougher enforcement by announcing separate sanctions in other procurement cases.
- Press reports linking the involved firms to Grupo Salinas and TV Azteca have intensified public and political scrutiny, raising risks to supplier privacy and to continuity of the registry as authorities complete the migration and possible sanctions.