2026 Government of Mexico City (CDMX) — Telegram claim; ~8M records advertised (unverified)
Data compromised
Actor-claimed: personal information, residential addresses, identification numbers, birth certificate details, CURP, electoral and geographic records, and additional citizen-related fields—unverified; CDMX had not confirmed at catalog time
Technical writeup
Unverified criminal-forum/Telegram claim — observed July 14, 2026. Threat-intelligence account CyberX (@CyberXlx9q) documented a Telegram post advertising a database allegedly belonging to the Government of Mexico City (Ciudad de México, CDMX) with approximately 8 million records, citing personal information, addresses, identification numbers, birth certificate details, CURP, and electoral/geographic fields. Earlier July 2026 reporting including DailyDarkWeb separately described underground posts claiming access to CDMX government-adjacent systems such as the Secretariat of Administration and Finance (SAF); those listings may or may not relate to the 8M row count. Neither CDMX nor SAF issued a matching public breach confirmation at indexing time. BreachHistory indexes recordsAffected 8,000,000 as the actor-cited figure, labeled unverified.
Root cause
Unverified Telegram/cybercrime listing alleging approximately 8 million records tied to the Government of Mexico City (CDMX)