Overview
- Security journalist Ignacio Gómez Villaseñor reported on May 29 that more than 1 gigabyte of files from the Programas del Bienestar were allegedly taken and that evidence and download links are circulating in cybercrime forums.
- The files the journalist described reportedly include 16‑digit card numbers, account details, CURP and RFC identifiers, scanned INE voter IDs, signatures and photos of beneficiaries receiving Banco del Bienestar cards.
- The Secretaría del Bienestar has denied a confirmed mass breach, saying it detected an irregularity, activated internal protocols and launched reviews but has not released a tally of affected people.
- The Coordinación Nacional de Protección Civil confirmed a separate recent intrusion and opened an investigation, and security commentators say the two incidents could be linked to the same criminal group.
- About 18.4 million people are enrolled in these social programs, no official victim notifications have been issued, and experts warn exposed dossiers could enable identity theft, bank fraud and extortion so beneficiaries should monitor accounts and report suspicious activity.