2026 SEED Durango — D3spair157 leak-site claim (unverified); 3,487 primary-school children alleged
Data compromised
Actor-claimed 3,487 child records ages 6–12 from 19 primary schools: CURP national IDs, full names, DOB, sex, home addresses, disability/special-needs flags, indigenous status, parents'/guardians' names and contacts—offered as free download; unverified
Technical writeup
Unverified leak-site claim — June 26, 2026. Threat-intelligence reporting documents actor D3spair157 claiming exfiltration from SEED Durango (Secretaría de Educación del Estado de Durango), Mexico, via administrator credentials to the state student-portal database. The actor allegedly posted 3,487 records covering children ages 6–12 across 19 primary schools, including CURP identifiers, home addresses, disability and indigenous-status flags, and parent/guardian contact data—creating acute child-safety risk beyond identity theft. The same group is linked to other recent Mexican government-portal leaks. SEED Durango had not publicly addressed the claim at catalog time. BreachHistory indexes the actor-cited 3,487 count as unverified.
Root cause
Unverified leak claim by actor D3spair157 (Sociedad Privada 157) alleging stolen administrator credentials to Durango state education portal—SEED Durango has not confirmed