<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"><channel><title>Mexico Cyber Watch</title><link>https://pwnsy.com/tools/cyber-watch/mexico/</link><description>Sourced cyber incidents and official statements, from pwnsy Cyber Watch.</description><language>en</language><lastBuildDate>Sun, 08 Nov 2026 00:00:00 +0000</lastBuildDate><item><title>Cinépolis: Ransomware (Claimed)</title><link>https://pwnsy.com/tools/cyber-watch/mexico/#all</link><guid isPermaLink="false">ba468e841859326f</guid><pubDate>Fri, 21 Aug 2026 00:00:00 +0000</pubDate><description>Qilin listed the cinema chain on its leak site. Sources: https://www.ransomware.live/country/MX</description></item><item><title>Sears México (Grupo Sanborns): Ransomware (Claimed)</title><link>https://pwnsy.com/tools/cyber-watch/mexico/#all</link><guid isPermaLink="false">f6a64099e4807c70</guid><pubDate>Sat, 15 Aug 2026 00:00:00 +0000</pubDate><description>SpaceBears listed Sears México on its leak site and promised sample files ahead of a full release. No company statement found. Sources: https://ransomware.live/id/U0VBUlMgKEdydXBvIFNhbmJvcm5zKUBzcGFjZWJlYXJz</description></item><item><title>Municipio de Chihuahua: Ransomware (Claimed)</title><link>https://pwnsy.com/tools/cyber-watch/mexico/#all</link><guid isPermaLink="false">237b20ff42e28873</guid><pubDate>Sat, 07 Feb 2026 00:00:00 +0000</pubDate><description>Qilin listed the Chihuahua municipal government on its leak site. Sources: https://www.ransomware.live/country/MX</description></item><item><title>IMSS-Bienestar and other public bodies: Data leak (Disputed)</title><link>https://pwnsy.com/tools/cyber-watch/mexico/#all</link><guid isPermaLink="false">8068d8039be3fcd2</guid><pubDate>Fri, 30 Jan 2026 00:00:00 +0000</pubDate><description>The Digital Transformation Agency (ATDT) said valid usernames and passwords found during the incident were disabled. It said it detected no breach of federal infrastructure and that old systems run by private vendors for states were mainly affected. Chronus said it leaked 2.3 TB from about 25 institutions, including 1.8 TB from the IMSS-Bienestar register. Sources: https://www.infobae.com/mexico/2026/01/31/gobierno-de-mexico-reacciona-a-supuesto-hackeo-al-sat-imss-bienestar-y-otras-instituciones/</description></item><item><title>Telcel: Data leak (Confirmed)</title><link>https://pwnsy.com/tools/cyber-watch/mexico/#all</link><guid isPermaLink="false">c4498b678d3eabba</guid><pubDate>Mon, 12 Jan 2026 00:00:00 +0000</pubDate><description>Telcel said it found and fixed a technical vulnerability in its new line registration portal. It denied a mass data breach. Users reported that entering any Telcel number returned the holder&#x27;s name, CURP, birth date and email. Sources: https://www.cronica.com.mx/nacional/2026/01/12/fue-vulnerabilidad-tecnica-telcel-responde-por-supuesta-filtracion-de-datos-personales/, https://expansion.mx/empresas/2026/01/12/telcel-niega-filtracion-masiva-de-datos</description></item><item><title>UNAM: Intrusion (Confirmed)</title><link>https://pwnsy.com/tools/cyber-watch/mexico/#all</link><guid isPermaLink="false">8e6ea1abfd93d94c</guid><pubDate>Wed, 07 Jan 2026 00:00:00 +0000</pubDate><description>UNAM confirmed an unauthorised intrusion into 5 of its roughly 100,000 systems over the holidays. It disabled them and said there was no sign that student or staff personal data was extracted. A journalist reported the attacker, ByteToBreach, reached data on over 380,000 students and staff and confidential rector&#x27;s office mail. Sources: https://www.elfinanciero.com.mx/nacional/2026/01/07/unam-confirma-hackeo-de-sistemas-informaticos-descarta-robo-de-informacion-de-datos-personales-de-alumnos/, https://www.xataka.com/seguridad/hackeo-a-unam-a-brecha-telcel-ciberseguridad-mexico-pasa-uno-sus-peores-momentos</description></item><item><title>Farmacia San Pablo: Ransomware (Claimed)</title><link>https://pwnsy.com/tools/cyber-watch/mexico/#all</link><guid isPermaLink="false">8b4e3c26d80ff6d1</guid><pubDate>Fri, 02 Jan 2026 00:00:00 +0000</pubDate><description>Qilin listed the pharmacy chain on its leak site with no proof attached. No company statement found. Sources: https://botcrawl.com/farmacia-san-pablo-data-breach/</description></item></channel></rss>
