conv.

All stories
SecurityQuiet 2d · day 3

Mexico investigates possible Aeromexico data breach of 15M records

Government finds Telegram user offering to sell airline customer database; airline says financial data not compromised.

What to know

  • A Telegram user posted an offer to sell over 15 million Aeromexico passenger records on September 18; Mexico's government detected and obtained a sample of the data.
  • Aeromexico denies that customer financial data, card information, or account passwords were compromised, though it launched its own investigation.
  • The disclosed data allegedly includes names, emails, phone numbers, and dates of birth; the ministry identified public servants and public figures among the records.

“The ministry said that its monitoring allowed it to locate a Sept. 18 post on Telegram in which 'a user offers a database supposedly attributable to Aeroméxico with more than 15 million records.'”

Mexico's Ministry of Anti-Corruption and Good Governance · Mexico News Daily ↗

Mexico's Ministry of Anti-Corruption and Good Governance (SABG) Government watchdog investigating the breachAeroméxico Airline whose customer data was allegedly compromised

Mexico investigates possible Aeromexico data breach of 15M records
upi.com

How it unfolded 2 developments, newest first · click a bar or a number to jump articlesposts

Peak 2 pieces in one hour at Sep 21, 12 PM; 3 pieces over 3 days (2 articles · 1 post) Sep 21, 12 PM — 2 pieces · 1 article · 1 post — Mastodon 1, Newswires 1Sep 21, 1 PM — quietSep 21, 2 PM — quietSep 21, 3 PM — quietSep 21, 4 PM — quietSep 21, 5 PM — 1 piece · 1 article — Newswires 1Sep 21, 6 PM — quietSep 21, 7 PM — quietSep 21, 8 PM — quietSep 21, 9 PM — quietSep 21, 10 PM — quietSep 21, 11 PM — quietSep 22, 12 AM — quietSep 22, 1 AM — quietSep 22, 2 AM — quietSep 22, 3 AM — quietSep 22, 4 AM — quietSep 22, 5 AM — quietSep 22, 6 AM — quietSep 22, 7 AM — quietSep 22, 8 AM — quietSep 22, 9 AM — quietSep 22, 10 AM — quietSep 22, 11 AM — quietSep 22, 12 PM — quietSep 22, 1 PM — quietSep 22, 2 PM — quietSep 22, 3 PM — quietSep 22, 4 PM — quietSep 22, 5 PM — quietSep 22, 6 PM — quietSep 22, 7 PM — quietSep 22, 8 PM — quietSep 22, 9 PM — quietSep 22, 10 PM — quietSep 22, 11 PM — quietYesterday, 12 AM — quietYesterday, 1 AM — quietYesterday, 2 AM — quietYesterday, 3 AM — quietYesterday, 4 AM — quietYesterday, 5 AM — quietYesterday, 6 AM — quietYesterday, 7 AM — quietYesterday, 8 AM — quietYesterday, 9 AM — quietYesterday, 10 AM — quietYesterday, 11 AM — quietYesterday, 12 PM — quietYesterday, 1 PM — quietYesterday, 2 PM — quietYesterday, 3 PM — quietYesterday, 4 PM — quietYesterday, 5 PM — quietYesterday, 6 PM — quietYesterday, 7 PM — quietYesterday, 8 PM — quietYesterday, 9 PM — quietYesterday, 10 PM — quietYesterday, 11 PM — quietToday, 12 AM — quietToday, 1 AM — quiet 12
Sep 22yesterdaynow · 2:56 AM ET
  1. 2

    Aeromexico says no financial data compromise detected

    Aeromexico issued a statement saying it had not identified any exposure of customer financial information, card details used for purchases, or account passwords for its rewards program, and that operations remained unaffected.

    “based on the information available, it hadn't identified any 'exposure' of its customers' 'financial information,' including details of cards used to purchase flights.”
    — Aeroméxico
  2. 1

    Mexico's Anti-Corruption Ministry identifies possible data exposure

    Mexico's Ministry of Anti-Corruption and Good Governance, through active forensic monitoring, identified the Telegram post offering Aeromexico data and obtained a sample of 100,092 records, confirming names of public servants and public figures among them.

    “Within the framework of active forensic monitoring of possible security incidents, the Ministry of Anti-Corruption and Good Governance identified signs of a possible exposure of personal data in a system that could be related to Aeroméxico.”
    — Mexico's Ministry of Anti-Corruption and Good Governance
    1. first by UPI, 2d ago

  3. background

    Telegram user offers Aeromexico database for sale — A user on Telegram posted an offer to sell a database allegedly containing over 15 million Aeromexico passenger records totaling 1.1 gigabytes, including customer names, emails, phone numbers, and dates of birth.