Mexico
Education
Involves Minors
Durango State Education Department Allegedly Breached, Exposing Records of Thousands of Primary School Children
A threat actor using the alias D3spair157 (operating as “Sociedad Privada 157”) has posted what they describe as a data leak from the Secretaría de Educación del Estado de Durango (SEED), Mexico's Durango state education department, reportedly obtained using administrator credentials to its student-management portal. The leak is said to contain 3,487 records covering children aged 6 to 12 across 19 primary schools, along with their parents and guardians. Per the post, the exposed fields include each child's CURP (Mexican national ID), full name, sex, date of birth, grade, home address, and sensitive status flags such as disability, special educational needs, and indigenous status, together with both parents' full names, home addresses, and phone numbers. Because this dataset concerns identifiable young children and their home locations, it is exceptionally sensitive. The dataset's authenticity and scope are unverified.
Mexico▣Post details
Mexico (Durango)!Allegedly included
- 3,487 child records (claimed)
- Children ages 6 to 12
- CURP (national ID) & full names
- Dates of birth & sex
- Home addresses
- Disability & special-needs flags
- Parents' / guardians' names & contacts
- 19 primary schools' data
◱Screenshot
⚠Potential impact
This is a critical child-safety incident. The dataset reportedly links thousands of named children aged 6 to 12 to their dates of birth, national ID numbers (CURP), and home addresses, and adds highly sensitive flags about disability, special educational needs, and indigenous status, alongside their parents' names, addresses, and phone numbers. Exposing identifiable young children together with their home locations and school enrollment creates a direct physical-safety risk, including potential for stalking, targeting, and child endangerment, beyond the usual harms of identity theft and fraud against the children and their families. National ID numbers and dates of birth are permanent and cannot be changed. Because the data was reportedly offered for free download, the exposure may already be spreading. No child or parent records, names, IDs, addresses, sample data, download links, or attacker contact channels are reproduced or linked here.
iStatus
UnverifiedThe actor claims the data was taken using administrator credentials to the state education portal and provides a download plus contact channels; none of these, and none of the children's or parents' personal data, are reproduced or linked here. This listing comes from the same group behind other recent Mexican government-portal leaks. The claim has not been independently confirmed and SEED Durango has not publicly addressed it.
DARK WEB INFORMER - THREAT INTELLIGENCE
