Overview
- Within the registry’s first day, researchers reported a Telcel portal flaw that exposed names, CURP, birthdates and emails during the verification process.
- Telcel took the site offline for about two hours, described the incident as a technical vulnerability, said it has been fixed, and denied evidence of mass data exfiltration.
- The anti-corruption secretariat opened 20 investigations into early platform failures, while regulators attributed issues to heavy traffic and kept the rollout on track.
- Key dates remain set: user query platforms by February 7, registration deadline June 30, and service suspension for unlinked lines starting July 1.
- Unregistered lines will be limited to emergency use; postpaid customers must keep paying contracts, prepaid numbers can be lost over the line’s life cycle, and operators differ on requirements, with AT&T and Movistar noting some preidentified postpaid accounts as Telcel requires all users to complete the process.