Mexico investigates Aeroméxico data leak

Update September 25, 2026: The Secretariat of Anti-Corruption and Good Government said the ex officio investigation is aimed at verifying compliance with Mexico’s Federal Law on Protection of [Personal Data](/en/news/mexican-senate-reviews-ai-laws) Held by Private Parties, based on Articles 54 and 55 of that law and the powers set out in its Internal Regulations. Aeroméxico, according to UPI, continues its own review of the origin and authenticity of the information.

Mexico’s Secretariat of Anti-Corruption and Good Government has opened an ex officio investigation into a possible data leak tied to Aeroméxico after spotting a Telegram post published on Sept. 18, 2026, that allegedly contained a database attributed to the airline. According to EFE, the file would include more than 15 million records and have a size of 1.10 GB. Aeroméxico said it is reviewing the database’s authenticity and, so far, has not identified exposure of financial information, payment card data, or customer passwords, including Aeroméxico Rewards accounts.

What did the Mexican authority find?

The federal agency found signs of a possible exposure of personal data in a system that could be related to Aeroméxico and, based on that finding, began active cyber monitoring. According to EFE, the Secretariat is also analyzing the data obtained in order to open an ex officio investigation and determine the alleged responsibility for the compromised databases.

Coverage from El Imparcial added that the government is reviewing a sample of 100,000 records and that the investigation is linked to a possible leak of more than 15 million passenger records offered on Telegram. Puente Libre also reported that the inquiry is based on a sample of 100,092 records allegedly linked to Aeroméxico.

What did Aeroméxico say?

Aeroméxico said it has opened its own investigation to verify the authenticity of the customer database, determine where it came from, and assess the scope of any possible impact. In the reports cited, the airline said that, based on the information available, it has not identified exposure of financial information, payment card data, or customer passwords.

The company also said the incident has not affected its operations and that it will cooperate with authorities. It also advised customers to stay alert for unusual emails, messages, or calls requesting personal or financial information, and to avoid responding to atypical communications that ask for sensitive or banking data.

What preventive steps were recommended?

The Mexican reports consulted agree on a set of basic measures for users who may be affected by a leak of this kind. These include enabling two-factor authentication, not reusing passwords, being wary of messages asking for personal data, and checking bank transaction alerts.

Tribuna de México added that the Secretariat is examining a possible violation of the Federal Law on Protection of Personal Data Held by Private Parties. For now, the case remains under official investigation, and the airline is continuing its internal review of the authenticity of the alleged file shared on Telegram.