Governo de Sonora · Breach

Claim: Actor publishes 270,382 records from Sonora's DeclaraSon

Nov 02, 2026 · 1 min read

Actor zerttack claims to have compromised DeclaraSon, the Government of Sonora's financial and interest disclosure platform in Mexico. The actor published a CSV with 270,382 records of public officials, including full names, CURP numbers, departments, and declaration submission dates. The claim is unverified; data authenticity checks and a government response are pending.

By HIFY Radar newsroom Updated 11/02/2026 12:46 PM Get this every day →← Back to the feed 1 source

MediumBreachNo software to update

In this article

What happened
Why it matters
What to do
For the technical team
Timeline
Sources

What happened

An actor known as zerttack claims to have breached DeclaraSon, the Government of Sonora's financial and interest disclosure platform in Mexico. The actor published a CSV with 270,382 records of public officials, including full names, CURP numbers, departments, and declaration submission dates. The claim is unverified.

Why it matters

If confirmed, the leak exposes personal and financial disclosure data of public officials, including CURP, an identifier used in Mexican government services. This could enable identity fraud and targeted attacks against those officials. No operational disruption has been reported.

What to do

Verify the authenticity of the published records, review anomalous access to DeclaraSon, and activate the incident response plan. If the breach is confirmed, notify affected officials and data protection authorities.

For the technical team

Affected: Governo de Sonora (México) DeclaraSon, plataforma de declarações patrimoniais e de interesses usada por servidores públicos do governo de Sonora (M · DeclaraSon, the financial and interest disclosure platform used by public officials of the Government of Sonora, Mexico.
Exploitation: Alleged and unverified leak. According to DarkWebInformer, actor zerttack published a CSV with 270,382 records of public officials.
Fix: No software to update
More details: The published dataset would include full names, CURP numbers, government departments and employment dependencies, financial declaration types with version histories, and declaration submission dates and timestamps. The claim was reported by DarkWebInformer, with no official confirmation from the Government of Sonora.