> ## Content Index
> Fetch the complete content index at: https://darkwebinformer.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Threat Actor Claims to Leak an INEGI Mexico Database Dump, 122K Businesses + 30K PII Records
- URL: https://darkwebinformer.com/threat-actor-claims-to-leak-an-inegi-mexico-database-dump-122k-businesses-30k-pii-records/
- Published: 2026-06-01T16:27:53.000Z
- Updated: 2026-06-01T16:27:53.000Z
- Author: Dark Web Informer
- Tags: Leaks

Breach Report ![Mexico flag](https://flagcdn.com/w40/mx.png)Mexico Government 

# Threat Actor Claims to Leak an INEGI Mexico Database Dump, 122K Businesses + 30K PII Records

A threat actor using the alias **sativa** claims to have leaked a database dump attributed to **INEGI**, Mexico's national statistics institute, allegedly sourced from internal **GOB.MX** services. The post advertises roughly **122,000 business directory records** and **30,000 birth records** with personal data, plus full PostgreSQL/PostGIS cartography, and provides free download links. The claim is **unverified**, and part of the business directory (DENUE) is data INEGI normally publishes openly.

Severity HIGH 

Data122K + 30K records

PriceFree dump

Country![Mexico flag](https://flagcdn.com/w40/mx.png)Mexico

Actorsativa

## ▣Post details

TargetINEGI (Instituto Nacional de Estadística y Geografía)

Country![Mexico flag](https://flagcdn.com/w40/mx.png)Mexico

SectorGovernment / National Statistics

ClaimFree database dump posted with download links

DataBusiness directory + birth records + cartography

ObservedJun 1, 2026

PriceFree dump

Actorsativa

## !Allegedly exposed

- DENUE business directory (\~122,173 records)
- Business names, legal names & addresses
- Postal codes and business phone numbers
- Business emails, websites & social handles
- GPS coordinates of establishments
- Birth records (\~30,363 records)
- Newborn birth date, sex, weight & height
- Mother's age, education & marital status
- Hospital facility codes (CLUES) & APGAR
- Full PostGIS cartography (states to blocks)

## ␱Screenshots

[ ![INEGI alleged data leak Screenshot 1](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/06/2357986239857623987462987536987623598723.png) Screenshot 1 Redacted preview ](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/06/2357986239857623987462987536987623598723.png) [ ![INEGI alleged data leak Screenshot 2](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/06/2357986239857623987462987536987623598724.png) Screenshot 2 Redacted preview ](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/06/2357986239857623987462987536987623598724.png) 

## ⚠Potential impact

If the dump is genuine, the exposure of roughly **30,000 birth records**, including newborn details, mothers' ages, education and marital status, and hospital facility codes, could enable serious privacy violations and the targeting of identifiable individuals. The business directory adds contact details and precise GPS coordinates usable for fraud or spam, though **much of the DENUE dataset is normally public**. A claimed compromise of GOB.MX internal services would also raise broader concerns about government system access.

## iStatus

Unverified 

Free download links and data samples were posted to an underground forum; the samples, links, and actor contact details are not reproduced here. The claim has **not been independently confirmed**, INEGI/GOB.MX has not publicly addressed it, and because some of the listed business directory data is routinely published by INEGI, the dump's novelty and authenticity remain uncertain.

Want the non-redacted screenshots? **Paid subscribers** get all of the claim details and unredacted screenshots, check out the [threat feed](https://darkwebinformer.com/threat-feed/) or [ransomware feed](https://darkwebinformer.com/ransomware-feed/). [View pricing →](https://darkwebinformer.com/pricing) 

[DARK WEB INFORMER](https://darkwebinformer.com/) \- THREAT INTELLIGENCE