2026 Banco Azteca — alleged ~850K customer/credit registry leak (unverified)
Data compromised
Actor/intel claims (unverified): customer names, addresses, phones, Mexican tax IDs (RFC), credit types/limits and interest-rate metadata — roughly 850,000 unique records cited. Separate earlier marketplace listings also advertised smaller (~20K) Azteca-related dumps.
Technical writeup
Unverified leak-site / forum sale claim — Brinztech threat alerts (late February 2026) described listings advertising Banco Azteca customer/credit data, with one analysis citing approximately 850,000 unique records including PII, RFCs and credit metadata, and an earlier listing marketing ~20,000 entries via escrow. Banco Azteca had not issued a public confirmation in sources reviewed at indexing. A “JUST IN” WSdatabase-style actor claim circulating in August 2026 social posts was not independently corroborated with a durable primary listing URL at catalog time; this row indexes the February 2026 alleged registry leak as the best-documented 2026 claim and remains labeled unverified until the bank or CNBV confirms. Customers should rotate banking credentials and treat Azteca-themed phishing as hostile regardless.
Root cause
Unverified dark-web / threat-intel listing claiming exfiltration from Banco Azteca customer or credit-management systems (Brinztech Feb 2026; bank had not confirmed at indexing)