🇲🇽 🚨 MEXICO: QILIN RANSOMWARE CLAIMS ATTACK ON EYE-CARE NETWORK SALAUNO The Qilin ransomware group has added salauno, a Mexican eye-care provider that runs a network of ophthalmology clinics, to its data-leak site. The listing gives no description of the data allegedly stolen and no sample details. The claim has not been independently verified, and salauno has not publicly confirmed an incident. ⚠️ Analyst Note: Ophthalmology clinics hold patient medical records, diagnoses, surgical histories and payment data, so a real breach would put sensitive health information at risk. Qilin has repeatedly hit healthcare providers, and some attacks have disrupted patient services. Patients should watch for phishing or fraud that cites their appointments. We assess this as an unverified ransomware claim, NOT confirmation of a breach. Source: this is for subscribers only. Subscribe: xitter.cf/DailyDarkWeb/creator-s… #DDW #DarkWeb #Mexico #Qilin #Ransomware #Healthcare #Ophthalmology #PatientData #ThreatIntelligence #CyberSecurity

¡YA LLEGÓ EL MATADOR! 🇲🇽👹

#Ransomware El grupo #Qilin cumplió su amenaza contra @MCMTelecom y ha liberado más de 115 GB de datos El listado de archivos incluye carpetas con nombres de clientes como Walmart, OXX, CFE, Liverpool, y dependencias: SAT, INE e INFONAVIT. #Ciberseguridad #México

⚠️ 🇲🇽 🏛️ PREVENTIVE ALERT: ALLEGED LEAK AND EXPOSURE OF DOCUMENTS FROM THE ATTORNEY GENERAL'S OFFICE (FGR) AND INACIPE (ACTOR: CUTZINGER AND SOULHEMTEAM) [STATUS: ALLEGED / UNCONFIRMED / THREAT ACTOR: CUTZINGER AND SOULHEMTEAM / DATE: OCTOBER 2026] The centralized cyber-intelligence system has detected a new post on underground forums by user "cutzinger," in collaboration with "Gara157SP" and the group "SoulhemTeam" . The report announces the exfiltration and disclosure of institutional information and service protocols belonging to Mexico's Attorney General's Office (FGR) and the National Institute of Penal Sciences (INACIPE). It is strictly noted that the veracity of this compromise and the full scope of the affected infrastructure have not been officially confirmed by Mexican government authorities. The definitive status of the infrastructure remains unconfirmed. Threat Actors: cutzinger, Gara157SP, and the SoulhemTeam group. Victim / Affected Entity: Attorney General's Office (FGR) and National Institute of Penal Sciences (INACIPE) in Mexico. Sector: 🏛️ Government, Law Enforcement/Justice, National Security, and Legal Education in Mexico 🇲🇽. Nature of the Sample: Structured documentation in JSON format regarding regulatory protocols, services for crime victims, manuals, and legal operational guidelines. 🛡️ TECHNICAL PREVENTIVE CONTAINMENT RECOMMENDATIONS (SOC / CSIRT / GOVERNMENT) Document Management Server Audit: FGR and INACIPE technology teams must immediately review access permissions for their internal documentation platforms and web portals to rule out active perimeter breaches. 🖥️ CENTRALIZED THREAT MONITORING SYSTEM Intelligence System: analyzer.vecert.io Quickly check your security at: monitor.vecert.io Quotes and services: vecert.io/contact #Cybersecurity #ThreatIntel #Mexico #FGR #INACIPE #DataLeak #SoulhemTeam #Cutzinger #InfoSec #CyberAlert #VECERT #SOC #CSIRT #Unconfirmed #SecurityAlert

🇲🇽 🚨 MEXICO: SINALOA STATE GOVERNMENT DATABASE (~1M CITIZEN RECORDS) ALLEGEDLY LEAKED A threat actor group on an underground forum claims to have published a database of about 1 million records allegedly taken from the official website of the Government of Sinaloa, Mexico (sinaloa[.]gob[.]mx). The actors claim the dataset includes: * Full names * CURP numbers (Mexico's unique population registry ID) * Home and apartment address details * Municipality, province and internal administrative codes The claim has not been independently verified. ⚠️ Analyst Note: If authentic, names, CURP and home addresses together would enable identity theft, impersonation of government services and targeted phishing against Sinaloa residents. The same group claimed a Durango state government database earlier today, which points to a pattern of attacks on Mexican state portals. Treat this as an unverified claim, not confirmation of a breach. Source: this is for subscribers only. Subscribe: xitter.cf/DailyDarkWeb/creator-s… #DDW #DarkWeb #Mexico #Sinaloa #Government #DataBreach #DataLeak #PII #ThreatIntelligence #CyberSecurity

🚨| FILTRAN REGISTRO DE DETENIDOS DE LA POLICÍA DE TIJUANA: INCLUYENDO MENORES DE EDAD Un grupo de ciberdelincuentes filtró una base con las detenciones de la SSPC de Tijuana de marzo de 2024 y actualizada hasta hoy, 12 de octubre de 2026. Trae nombre completo, fecha de nacimiento, apodo y delito de cada persona. Según su último registro, se extrajo ESTA MISMA MADRUGADA. Es una filtración sensible, pues expone a 558 ADOLESCENTES, 41 de ellos de 14 años o menos, con nombre y fecha de nacimiento. Son personas detenidas, NO SENTENCIADAS, cuya identidad la ley protege de forma especial. También quedan expuestos 2,730 nombres de fiscales, agentes del Ministerio Público y policías investigadores, ligados a casos de narcomenudeo, armas y aprehensiones. En Tijuana, eso es ponerles un blanco encima. El patrón de los archivos apunta a descargas con un usuario válido del sistema municipal, no a un hackeo externo. Falta confirmar si fue alguien de dentro o una cuenta robada.