🚨 NATIONAL SECURITY ALERT: MASSIVE DATA LEAK – PUERTO INTELIGENTE SEGURO (MEXICO) 🇲🇽⚓🔐
A critical data breach has been detected affecting Mexico’s *Puerto Inteligente Seguro* (PIS) [Secure Smart Port] platform—a system managed by the Secretariat of the Navy (MARINA) for the administration and security of the National Port System. Threat actor "marssepe" has put up for sale a massive database that compromises the logistics and security of the country's port facilities.
🏢 Affected Entity: Puerto Inteligente Seguro / National Port System Administration (ASIPONA) – MARINA.
👤 Threat Actor: marssepe.
📂 Leak Volume: Approximately +200 GB.
📅 Publication Date: April 29, 2026.
📊 Breach Scope (PII and Logistics Security)
The database, structured in .json files, contains comprehensive information enabling the complete profiling of port operations:
Personnel and Operator Identities: Full names, CURP, RFC, Social Security Numbers (NSS), blood types, gender, and photographs.
Employment Data and Credentials: Job titles, hierarchical levels, affiliated companies, registration numbers, and institutional/personal email addresses.
Security and Transport: Vehicle records, access permits, driver's licenses (detailing whether they are permanent or professional/chauffeur licenses), passport validity dates, and "flagged" status.
Business Logistics: Information regarding transport companies and logistics operators authorized to operate within Mexican ports.
🛡️ Immediate Response Recommendations
🔒 Access Audit: MARINA and the ASIPONAs must immediately revoke the API credentials identified in the leak and conduct a threat hunt to locate the point of data exfiltration.
🔑 Digital Identity Rotation: Mandate a password and digital certificate reset for all users of the PIS platform.
Monitor: https://t.co/wk9bZJ2Nli
#CyberSecurity #Mexico #Marina #PIS #PuertoInteligenteSeguro #DataBreach #ASIPONA #Logistica #VECERT #InfoSec 🇲🇽🛡️⚠️🚨⚓
🇲🇽 BBVA Mexico Data Leak – 200K Records Exposed
A threat actor claims to have leaked data allegedly with BBVA Mexico, impacting approximately 200,000 individuals.
📊 Claimed Scope:
• ~200,000 records
• Financial-related personal data
• Publicly shared download link
📂 Alleged Data Includes:
• Full names (Nombre completo)
• Surnames (Paternal / Maternal)
• Full address details (street, postal code, city, state)
• Credit line information
• RFC (Mexican tax ID)
• TDC (credit card-related data)
🔍 What Stands Out:
• Dataset appears structured for financial profiling
• Includes national identifiers (RFC) → high sensitivity
• Direct download link suggests wide distribution / low barrier access
🧠 Threat Intelligence Insight:
• Could originate from third-party financial services or data aggregation systems
• Combination of identity + financial indicators enables fraud, loan abuse, and identity theft
• Low reputation actor → possible resale/repackaged dataset
⚠️ Potential Risks:
• Financial fraud & unauthorized credit activity
• Identity theft using RFC + address data
• Targeted phishing / social engineering
📊 Status: Unverified — high-risk dataset under circulation
💬 Financial datasets with national IDs remain among the most abused assets in cybercrime ecosystems.
#CyberSecurity #DataBreach #BBVA #Mexico #ThreatIntel #DarkWeb #DailyDarkWeb
🚨RAG es el pasado. Esto es el FUTURO
Si todavía estás chunkeando PDFs y metiendo embeddings... vas por mal camino.
Presentando PageIndex
→ 98.7% de accuracy en FinanceBench.
→ Cero vectores.
→ Cero chunking.
→ Cero bases de datos caras.
Convierte cualquier documento largo en un árbol jerárquico inteligente (como un índice perfecto) y deja que el LLM razone como un analista senior humano, navegando sección por sección.
Preciso.
Trazable.
Brutal con reportes financieros, contratos, papers técnicos… todo lo que tu RAG actual odia.
REPOOO👇