Mexico
Government / Presidency
Free Download
Mexican Presidency's Citizen Petition System Allegedly Breached, 400,000 Citizens and 59 Federal Agencies Exposed
An actor posting as cenfecracked claims to have obtained the database behind the Sistema de Atención Ciudadana, the platform through which members of the public submit petitions and requests for assistance to the Mexican Presidency. The listing describes 400,000+ citizen records spanning 59 federal agencies, including the defence, interior, foreign affairs, and health ministries, with records dated to 2026. Alongside CURP and RFC national identifiers, dates of birth, occupations, and full home addresses, the schema covers the substance of each petition, its assigned agency, internal official commentary, and the names and contact details of the government analysts handling it. The claim is unverified.
▣Post details
Mexico!Allegedly included
- Full names
- CURP national identifiers
- RFC tax identifiers
- Dates of birth
- Occupation & civil status
- Verified email addresses
- Phone numbers
- Full home addresses
- Petition subject & description
- Category and sub-category
- Assigned federal agency
- Case status history
- Internal official comments
- Assigned analyst names
- Official handler emails
- Response documents
◱Screenshots
⚠Potential impact
The identifiers alone would be serious, since CURP, RFC, name, birth date, and home address form the basis of Mexican identity verification and cannot be reissued. What raises this further is the content of the petitions. People approach the Presidency about health, employment, poverty, and security, often in circumstances of real difficulty, and the dataset ties each request to a named person at a known address. Requests routed to the defence and interior ministries carry the sharpest risk: identifying who formally approached security institutions, and what about, is information with consequences beyond fraud. The directory of officials and case handlers separately enables convincing impersonation of government to those same citizens.
iStatus
UnverifiedThe post publishes a complete schema and a sample record that the actor partially masked themselves, alongside an explicit list of intended uses including social engineering and phishing. Dark Web Informer is not reproducing the distribution channel, contact routes, or official handler addresses. This actor was credited alongside the handle behind a separate Mexican state government leak published days earlier, indicating sustained targeting of Mexican public institutions. The claim is unverified and the Presidency has not publicly addressed it.
DARK WEB INFORMER - THREAT INTELLIGENCE
