Data Leak Scandal in Mexico

Former employees and clients accuse ECD of improper treatment and leaking critical data, exposing millions to financial risks.


Data Leak Scandal in Mexico

A series of complaints from both former employees and clients has put the company Especialistas en Contacto Directo (ECD) in the spotlight for alleged misconduct, violation of labor laws, and aggressive collection tactics. According to testimonies collected in online forums and YouTube videos, the company is accused by employees and clients of using questionable practices.

The founder of SILIKN, interviewed by Publimetro México, expressed his concern, stating that the safety of ECD's client data could be at risk due to the alleged irregularities within the company. Reports that have been removed from the Internet also reveal abuses within the company.

ECD's CEO, Israel Ricaño, faces accusations of abusive collection practices and an authoritarian leadership style. According to a report by Quinta Fuerza, both clients and former employees accuse Ricaño of instructing his team to harass debtors with threatening calls and messages.

Recently, data was leaked exposing information of millions of Mexicans, mostly IMSS pensioners, revealing a troubling lack of security in the company that manages banking and collection data of a significant percentage of the population.

In October, a cybercriminal known as Nick Diesel put up for sale information on 1.2 million clients of Libertad Servicios Financieros. It is warned that this hacker could intend to gradually disclose additional databases, compromising the security of up to 27 million Mexicans.

Cybersecurity expert, Víctor Ruiz, warns that this leak represents an unprecedented risk in Mexico, as the databases could be sold separately, exposing millions of people to financial and privacy risks. This compromised data could include client information from other companies such as Credifranco and Telmex.

Ruiz also highlighted that this situation reflects the level of vulnerability of companies that outsource collection and customer service to call centers without proper cybersecurity controls. The concern centers around the implications this massive data leak could have for clients of companies like Inbursa, Libertad, Telcel, and TotalPlay, among others.

The seller of these leaks, Nick Diesel, operates in the deep web and uses sophisticated methods to validate the authenticity of the data before selling it. The offered data includes sensitive personal information such as names, social security numbers, addresses, and phone numbers, exposing victims to significant risks of identity theft and financial fraud.

The hypothesis of a data leak from ECD emerges as a potential cause of this incident, given that the company has access to information from multiple Mexican companies. There is a possibility that former employees may be involved in the leak, considering evidence of questionable labor practices within the company.

Amid these revelations, the concern for the security and privacy of user data has led specialists and authorities to take action to investigate and safeguard the sensitive information of Mexicans.