PRI and PAN Parties Hit by Major Data Breach Amid Corruption Scandal in Mexico

📌 Company Overview

• Entity Involved: PRI (Partido Revolucionario Institucional) & PAN (Partido Acción Nacional)
• Location: Nuevo León, Mexico
• Industry: Political Parties

🔍 Breach Details

• Date of Incident: July 24, 2024
• Breach Discovered: A database containing sensitive personal information of over 78,711 citizens affiliated with the PRI and PAN political parties in Nuevo León, Mexico, was leaked.
• Type of Data Exposed:
  • Full Names
  • Voter IDs
  • Full Addresses
  • CURP (Clave Única de Registro de Población)
  • Date of Birth
  • Date of Affiliation to the PRI and PAN
• Source of Leak: The data was posted on an underground forum by a user known as "USDDoD". The post alleges the involvement of these political parties in corrupt activities, including election manipulation and violent acts against opponents.
• Access to Data: The data is freely downloadable via links provided in the forum post, potentially making it accessible to a wide range of malicious actors.

👤 Threat Actor Profile

• Alias: USDDoD
• Affiliation: Equation Corp. (likely a reference, possibly sarcastic or fictitious)
• Credited Entities: "ViralGod" aka HolisticKiller, indicating possible collaboration or recognition within the hacking community.

💥 Impact Analysis

• Affected Individuals: 78,711 citizens of Nuevo León, Mexico.
• Potential Risks:
  • Identity Theft: With detailed personal information exposed, affected individuals are at high risk of identity theft.
  • Political Repercussions: The breach could damage the reputation of the PRI and PAN parties, affecting public trust and electoral outcomes.
  • Physical Safety: The leak of addresses and affiliations could expose individuals to targeted violence, especially in the politically charged environment described in the forum post.