Mexico Investigates Possible Aeroméxico Data Leak of 15 Million Records

Mexico City — Mexico’s anti-corruption ministry has opened an investigation into a possible leak of personal data linked to Aeroméxico after a database containing more than 15 million records was circulated and offered to third parties on Telegram.

The Anti-Corruption and Good Government Ministry said it found the posting on Sept. 18 while monitoring for digital security incidents. The file is approximately 1.10 gigabytes in size and reportedly contains full names, email addresses, phone numbers, dates of birth and registration dates.

As part of its review, the ministry obtained a sample of 100,092 records and found information matching the fields described in the circulating database. The names include identifiable individuals, among them public servants and public figures, though officials cautioned that this alone does not confirm the data was taken from Aeroméxico’s systems.

The ministry said it is working to determine whether the information actually originated on the airline’s platforms, along with the circumstances in which it may have been exposed and who could be held responsible. If it gathers sufficient evidence, it said it will proceed under Mexico’s personal data protection rules.

Aeroméxico said it is also reviewing the authenticity, origin and scope of the information made available online. The airline said it has found no indications so far that financial data, payment card numbers or customer passwords were exposed, including for users of Aeroméxico Rewards, and that its operations have not been affected.

The company urged customers to stay alert to emails, calls or messages that request personal or financial information in unusual ways, and said it will cooperate with authorities to establish where the database came from and whether any customers were affected.