Hidalgo C5 Emergency Dispatch System Access Allegedly Offered for Sale
A forum actor posting as Sc0rp10nn is offering what they claim is access to one of Hidalgo C5's advanced public-safety monitoring and dispatch systems in Mexico. The actor says they previously compromised C5 Hidalgo several years ago, placed multiple backdoors and still retain access. According to the listing, the system centralizes statewide alerts and incident handling and contains call audio, GPS incident locations, names and addresses of involved individuals, incident coordinates, case details and information about which personnel or agencies handled each event. The actor further claims the access allows a buyer to watch alerts and their status in real time, view assigned patrol numbers, create false reports, assign patrols to real or false incidents and locations, and cancel patrol assignments. The claim is unverified.
▣Post details
!What the post claims
- Long-term access to Hidalgo C5 systems
- Multiple backdoors allegedly remain in place
- Access to a statewide alert and dispatch platform
- Real-time alert monitoring
- Real-time incident status
- Call audio
- GPS incident locations
- Exact incident coordinates
- Names of people involved in incidents
- Addresses and incident details
- Information on who handled each incident
- Exact patrol numbers assigned to incidents
- Ability to create false reports
- Ability to assign patrols to real incidents
- Ability to assign patrols to false incidents
- Ability to select incident locations
- Ability to cancel patrol assignments
- Access to third-party integrations is claimed
- Actor specifically references Carbyne-related abuse
◱Screenshots
☷Mapped techniques
The actor does not disclose how the original intrusion or claimed backdoors were established. The techniques below map only to capabilities described in the listing.
- Collection T1213 Data from Information Repositories Claimed The listing claims access to detailed incident records containing call audio, locations, identities, addresses, coordinates, assignments and case-handling information.
- Impact T1565.001 Stored Data Manipulation Claimed The actor explicitly claims the ability to create false incident reports, alter dispatch assignments and cancel patrol assignments inside the system.
⚠Potential impact
If authentic, the claimed access could create an immediate public-safety and operational-security risk. Visibility into live incidents, caller information, exact locations and assigned patrol units could expose sensitive law-enforcement activity and the movements of emergency personnel. More seriously, the claimed ability to create false incidents, redirect patrols or cancel assignments could interfere with emergency response, divert resources away from legitimate events or create dangerous situations for responders and the public. Persistent access to an emergency-dispatch environment would also raise the risk of surveillance, extortion, sabotage and follow-on compromise of connected systems.
iStatus Unverified
The forum post includes multiple screenshots presented as evidence of access to Hidalgo C5 interfaces and describes specific monitoring and dispatch capabilities. The actor also claims that backdoors from an earlier compromise remain active. However, the listing does not provide independently verifiable evidence of current control over the environment, does not identify the original intrusion method and does not state whether Hidalgo authorities are aware of or have remediated the alleged access. Dark Web Informer has not independently verified the access, persistence claims or the actor's ability to manipulate live emergency dispatch operations.
Dark Web Informer // Threat Intelligence
