SINACOL / CENCOLAB · Breach

Threat actor alleges leak of SINACOL and CENCOLAB representatives database

Nov 03, 2026 · 1 min read

A threat actor posted on a dark web forum and a Telegram channel a database they claim holds representatives registered on Mexico's labor conciliation platforms SINACOL and CENCOLAB, with names, contacts, CURP, RFC and power-of-attorney details. There is no official confirmation, the number of affected people is unknown, and the data may have been scraped from a portal rather than back-end systems. Treat it as an unverified claim and monitor for misuse of CURP and RFC numbers.

By HIFY Radar newsroom Updated 11/03/2026 11:24 AM Get this every day →← Back to the feed 1 source

MediumBreachNo software to update

In this article

What happened
Why it matters
What to do
For the technical team
Timeline
Sources

What happened

A threat actor posted on a dark web forum and a Telegram channel a database they claim holds representatives registered on Mexico's labor conciliation platforms SINACOL and CENCOLAB. The claim includes full names, contact details, national ID (CURP), taxpayer registry (RFC) and details of legal powers of attorney and ID documents. There is no official confirmation.

Why it matters

If authentic, per DailyDarkWeb, CURP and RFC numbers paired with legal-representation records are a ready kit for identity fraud and for impersonating legal representatives in labor disputes. The number of affected people has not been stated. Companies with representatives on these platforms face fraud exposure.

What to do

Treat it as an unverified claim and watch for official confirmation. Alert representatives registered on SINACOL and CENCOLAB and monitor for misuse of CURP and RFC numbers, including fraudulent representation in labor disputes.

For the technical team

Affected: SINACOL / CENCOLAB (México) SINACOL e CENCOLAB, plataformas federais de conciliação trabalhista do México; base alegada de representantes registrado · Alleged database of representatives registered on Mexico's federal labor conciliation platforms SINACOL and CENCOLAB. Number of people not stated.
Exploitation: None. Unverified threat-actor claim shared on a dark web forum and a Telegram channel (reported by DailyDarkWeb). No official confirmation of a breach.
Fix: Not applicable. No system fix cited; authenticity of the material unverified.
Vector: Unknown. DailyDarkWeb notes the data may have been scraped from a portal rather than taken from back-end systems. No confirmed intrusion.
More details: Alleged contents: full names and contact details, CURP numbers, RFC numbers, details of legal powers of attorney and ID documents. If authentic, CURP plus RFC paired with legal-representation records enable identity fraud and impersonation of legal representatives in labor disputes (DailyDarkWeb analyst note). Affected count not stated. Unconfirmed claim.