Overview
- The mandatory registry began on January 9 linking mobile numbers to CURP, and journalists documented that Telcel’s site exposed personal data by entering a phone number without effective authentication.
- Telcel acknowledged a technical error, said it was corrected immediately, and denied a mass leak while not confirming how many users were exposed or whether it will notify potentially affected customers.
- The Secretaría Anticorrupción y Buen Gobierno opened an ex officio investigation, with Raquel Buenrostro confirming active probes into reported data incidents.
- PRI senators called for immediate suspension of the registry, citing privacy and security risks and pointing to the Supreme Court’s 2022 invalidation of the RENAUT scheme.
- Legal experts and a former data regulator emphasize shared obligations under LFPDPPP and renewed calls for a dedicated cybersecurity law to set clear breach reporting, audits, and sanctions.