Skip to content
Tips? Soon

IEEA Campeche Data Breach: Hackers Claim to Leak Staff and Student Records

Breach Report Mexico flagMexico Government

IEEA Campeche Data Breach: Hackers Claim to Leak Staff and Student Records

A threat actor using the alias l1ghtSoulHem, posting for "SoulHemTeam," claims to have breached the IEEA (State Institute for Adult Education) in Campeche, Mexico, and leaked a database tied to campeche.inea.gob.mx. The post lists exposed fields including full names, phone numbers, emails, CURP national IDs, salaries, and staff and student records, and links to a Telegram channel. The claim is unverified and the institute has not publicly addressed it.

DataStaff + student data
PriceFree leak
CountryMexico flagMexico
Actorl1ghtSoulHem

Post details

TargetIEEA Campeche (Instituto Estatal de Educación para Adultos)
CountryMexico flagMexico
SectorGovernment / Education
ClaimDatabase leak posted (breach claimed)
DataStaff & student records (names, CURP, salaries)
ObservedJun 3, 2026
PriceFree leak
Actorl1ghtSoulHem (SoulHemTeam)

!Allegedly exposed

  • Full names (staff & students)
  • Phone numbers
  • Email addresses
  • CURP national identifiers
  • Employee / worker records
  • Student records
  • Salary information
  • State agency directory data

Screenshot

Potential impact

If genuine, the exposure of names, CURP national IDs, phone numbers, emails, and salary data for staff and students of a state education institute could enable identity theft, impersonation, and targeted fraud against affected individuals. CURP is a unique, lifelong identifier in Mexico, which makes it especially valuable to attackers. No record count was stated, so the size of the dataset is unclear.

iStatus

Unverified

A breach was claimed and a sample staff directory was posted to an underground forum, with a Telegram channel for distribution; the sample records and channel are not reproduced here. The claim has not been independently confirmed, and the institute and Campeche authorities have not publicly addressed it.

Want the non-redacted screenshots? Paid subscribers get all of the claim details and unredacted screenshots, check out the threat feed or ransomware feed. View pricing →

DARK WEB INFORMER - THREAT INTELLIGENCE

Latest