Mexico
Education
WhatsApp Communications
Published
Unverified
INBI School of English WhatsApp Data Claim Includes 3.34 Million Messages and 171,967 Phone Numbers
Overview
An actor using the handle "libreboot2016" claims to have published a WhatsApp message dataset associated with INBI School of English, a private conversational English school network in Mexico.
The post states that the dataset contains 3,337,394 WhatsApp messages and 171,967 individual mobile phone numbers using +52 and +1 country codes. A visible field list includes message body, creation and sent timestamps, direction, error fields, sender and recipient fields, messaging-service identifiers, media-related fields, pricing fields, message SID, status, feedback, media metadata and URI data. The dataset, its source, the stated counts and current availability have not been independently verified.
Post details
MexicoWhat the post claims
- 3,337,394 WhatsApp messages
- 171,967 individual mobile phone numbers
- +52 and +1 number ranges represented
- Message-body field included
- Creation, sent and update timestamps included
- Message-direction field included
- Error-code and error-message fields included
- Sender and recipient fields included
- Messaging-service identifier included
- Media-count and media metadata fields included
- Segment-count field included
- Pricing and price-unit fields included
- Message SID field included
- Status field included
- Feedback and subresource-URI fields included
- Download mirrors provided
The visible field list resembles structured messaging-platform export data rather than a simple contact list. The screenshot does not show individual message contents, so the sensitivity and subject matter of the communications cannot be independently assessed from the supplied material alone.
Screenshots
IOCs & identifiers
Identifiers directly visible or supported by the supplied material. These support correlation and do not independently verify the dataset claim.
| Type | Identifier | Source |
|---|---|---|
| Actor handle | libreboot2016 | Screenshot 1 |
| Named organization domain | inbi[.]mx | Screenshot 1 |
The organization domain identifies the entity named in the claim, not malicious infrastructure. No Tox ID, Session ID, Telegram handle, malware hash or attacker-controlled IP address is visible in the supplied screenshot. Direct download mirrors shown in the source material are intentionally not reproduced here.
Mapped techniques
Claimed identifies behavior explicitly described by the actor. Inferred identifies an analytical mapping supported by the supplied material. Neither label means the activity has been independently verified.
- Collection T1213.006 Data from Information Repositories: Databases Inferred The listing presents a structured message dataset containing communications metadata and phone-number information. The supplied material does not reveal how the data was obtained or independently establish unauthorized access to INBI systems.
Potential impact
If authentic, the claimed dataset could expose large-scale messaging metadata, mobile phone numbers and potentially the content of communications involving students, prospects, graduates or staff. Depending on the underlying message bodies, the material could enable targeted phishing, impersonation, spam, social engineering or significant privacy violations.
Status Unverified
Dark Web Informer has not independently verified the dataset's authenticity, source, completeness, 3,337,394-message count, 171,967-number count or current availability. The supplied screenshot documents the listing and visible field structure, not independent confirmation of the underlying data.
