Incident Overview

A threat actor going by Eternal has leaked over 790GB of data from Servicios de Agua y Drenaje de Monterrey (AyD), the public water and drainage utility for the state of Nuevo León, Mexico. The actor claims the database covers all water service users in the region and has made it available as a free two-part download, stating they are releasing it to undercut resellers who have been selling their databases at inflated prices.

The leaked data reportedly includes full names, physical addresses, water consumption records, and RFC (Registro Federal de Contribuyentes) tax identification numbers for customers across Nuevo León. Given that AyD is the sole water utility for the state, the scope of this leak could potentially affect millions of residents and businesses.

The threat actor also included a direct message to the Nuevo León government, warning that they still possess additional databases from government systems and threatening further releases. They also directed a warning at resellers, stating they intend to make all of their databases public if reselling activity continues.