Mexico probes sale of 12.9 million records

Update September 29, 2026: The alert originated in a Telegram post detected on September 22, 2026, where a user offered databases allegedly tied to different call centers. The investigation remains open to determine where the data came from and whether the offer reflected a real breach.

Mexico’s Anti-Corruption and Good Government Ministry is investigating the alleged sale of more than 12.9 million records containing personal data tied to several call centers. Authorities detected a Telegram post, shared on September 22, in which a user offered databases said to have been taken from call centers operating in Mexico. The probe is still open to determine where the data came from and who may be responsible for exposing and putting it up for sale.

What did the Mexican authority detect?

The ministry opened the case on its own after monitoring Telegram, according to N+, to clarify the origin of the databases and the possible responsibility behind their spread. Available coverage agrees that the discovery began with an offer posted on that platform, not with public confirmation of a specific intrusion.

Forbes Mexico said the described information includes full name, email address, phone or mobile number, date of birth, RFC, home address, and, in some cases, bank details. That level of detail widened the scope of the case, although the sources consulted still do not confirm that the entire database is authentic or that it came from a single operation.

What data appeared in the offer?

Descriptions published by the media indicate that the files being offered brought together personal data from different databases and, in some cases, banking information. El Financiero reported that the investigation would be linked to databases attributed to 23 companies, in addition to the call centers mentioned by the ministry.

Radio Fórmula added that the Anti-Corruption and Good Government Ministry obtained a sample of 13,000 records from 13 different databases for analysis, a step meant to verify the actual composition of the exposed material. Publimetro, meanwhile, said the offered files were associated with databases identified through commercial names of banks, department stores, digital platforms, and other companies, although that attribution comes from the offer’s description and does not prove a breach at those firms.

Is the origin of the records confirmed?

No. The investigation remains open and there is still no official confirmation about the data’s origin or the full authenticity of the database. Xataka Mexico noted that the goal remains to determine where the records came from, without identifying any company as responsible in its coverage or treating the full set of information offered on Telegram as verified.

Based on the available material, the case stands as an inquiry into the alleged sale of databases tied to call centers in Mexico, with personal data and, in some cases, banking data, but no final attribution for the source of the leak.