Mexico’s Secretariat of Anti-Corruption and Good Government (SABG) has opened an investigation after discovering that a dataset containing roughly 15 million records belonging to Aeroméxico passengers was being offered for sale on the messaging app Telegram.
According to the agency, the file in question weighs about 1.10 gigabytes and appears to include sensitive personal details such as passengers’ full names, email addresses, cell phone numbers, dates of birth, and the dates they registered with the airline.
SABG said the finding emerged from ongoing forensic monitoring aimed at detecting potential cybersecurity incidents across public and private systems. Officials noted that the exposed data “could be related” to Aeroméxico, Mexico’s flagship carrier, though the airline’s possible involvement or response has not yet been detailed publicly.
The agency announced the probe through its official social media channels, describing the situation as a possible case of unauthorized personal data exposure. Authorities have not yet confirmed how the information may have been obtained, whether it stems from a direct breach of Aeroméxico’s systems, or if any actual transaction involving the data has taken place.
Cases like this raise concerns in Mexico about the security of personal information held by major companies, especially as airlines and other travel-related businesses collect vast amounts of customer data. The investigation is ongoing, and further details are expected as SABG continues its review.
For more details, read the original report from Reforma.
Source: Indaga SABG venta de datos de clientes de Aeroméxico (Reforma).
Image: The National Archives UK – Flickr account.