2026 Citibanamex (Mexico) — forum “mega-leak” claims; SEP attribution confusion (Apr)
Data compromised
Actor-claimed financial and personal dossiers—authenticity disputed in open analysis
Technical writeup
Around April 23, 2026, cyber-intelligence posts (VECERTRadar, Dark Web Informer) highlighted a large criminal-forum dataset marketed under Citibanamex / Mexico banking branding, with actors such as “Jansz” and “GersonFDP” named in summaries. Analysts immediately noted metadata inconsistencies—e.g., actor descriptions allegedly referencing Mexico’s Ministry of Education (SEP) rather than the bank—sparking warnings that the bundle could be recycled or mislabeled. Brinztech-style monitoring pages catalogued the claim status. No unified Citi/Citibanamex press release corroborating the full marketing story was indexed alongside the first forum wave.
Root cause
Forum-led leak listing; possible mislabeling or compilation of unrelated sources