A cyber attacker identified as Nick Diesel has put up for sale a database containing sensitive information of 1.2 million Mexicans. It is said that this data was extracted from Libertad Servicios Financieros, a financial institution with over 140 branches in Mexico that offers credit, savings, and investment services. The leak has caused alarm because it exposes not only personal data but also financial information of users, including pensioners from IMSS, a group vulnerable to fraud.
The attacker, known to operate from a Russian hacker forum, has a history of conducting attacks against Mexico. Libertad Servicios Financieros, as a Popular Financial Society, manages savings accounts, loans, and other services for a wide sector of the population. The compromised data includes full names, emails, phone numbers, CURP, RFC, and social security numbers.
Víctor Ruiz, a certified cybersecurity instructor and founder of SILIKN, warned about the risks faced by the victims, such as identity theft, financial fraud, and extortion. Ruiz mentioned that this leak could expose approximately half of the customer data of Libertad.
As proof of the leak, the attacker posted an excerpt of the database on a deep web forum, detailing the information contained. This level of detail makes it easier for criminals to create personalized and sophisticated attacks. Nick Diesel had previously been linked to the sale of a banking database containing information of 27 million Mexicans in May 2024, raising concerns about possible fraud and future attacks.
Highlighted risks include identity theft, extortion facilitated by detailed location and contact information, threats to privacy, psychological impact on those affected, and the urgent need to improve cybersecurity education and prevention in Mexico. The current price for this database is $1,600 and includes detailed information such as the type of pension of customers, the status of their accounts, and the branch of Libertad they belong to, as well as other data like names, addresses, phones, among others.
