Overview
- The Telegram post was located on Tuesday, Sept. 22, when monitoring by the Secretaría Anticorrupción y Buen Gobierno found an offer claiming more than 12.9 million personal records for sale.
- As part of the inquiry the agency secured a 13,000‑record sample drawn from 13 separate databases and has begun technical analysis of those files.
- Preliminary review of the sample shows commercial names from many banks, retailers and other firms but the authority warned that appearance in the data does not prove those companies are responsible.
- The Secretaría has opened oficio investigations under the Ley Federal de Protección de Datos Personales en Posesión de los Particulares but has not yet confirmed the full dataset’s authenticity or identified a definitive source.
- Security firms and previous cases show a growing underground market where bulk personal data sells cheaply and that combination of names, addresses, RFCs and banking details raises clear risks of phishing, identity theft and account fraud.