[Single source] Claim: Jalisco driver's license database offered for sale
A threat actor is advertising on a dark web forum a 12 GB compressed package described as part of the driver's license database of Jalisco, Mexico, with personal data, front-facing photos, and handwritten signatures. The claim is unverified, no record count was given, and Jalisco authorities have not commented. If confirmed, the material enables fake IDs, KYC bypass, and identity fraud; companies with customers in the region should strengthen identity checks and monitor for fraud.
In 30 seconds
A threat actor on a dark web forum is advertising a 12GB compressed dataset they describe as part of the driver's license database of the State of Jalisco, Mexico. The offer includes personal information of license holders, front-facing photographs, and handwritten signatures stored as encoded images, with pricing available on request.DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list
The claim was surfaced on November 8, 2026 by DailyDarkWeb, a dark web monitoring account on X, which stresses this is an unverified threat-actor claim and not confirmation of a breach. No record count was given and Jalisco authorities had not commented.DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list
What happened
According to a post relayed by DailyDarkWeb, a threat actor on a dark web forum is offering for sale a 12GB compressed dataset that they claim is part of the driver's license database of the State of Jalisco, Mexico.DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list
The advertised dataset is said to contain personal information of license holders, front-facing photographs, and handwritten signatures stored as encoded images. The actor describes the offering as only "a little part" of a larger database, and the price is available on request.DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list
No record count was provided in the forum post, and as of the reporting there was no comment from Jalisco authorities on the alleged offering.DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list
Why it matters
If the dataset is real, the combination of faces, signatures, and personal details would constitute a ready-made kit for creating fake IDs, bypassing KYC (Know Your Customer) checks, and committing identity fraud, according to the analyst note accompanying the report.DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list
Government-issued identity documents are foundational to many verification workflows, so an alleged leak from a state licensing authority: even unverified: is relevant to any organization that accepts Mexican driver's licenses as identity proof.DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list
What to do
Treat the claim as unverified until corroborated: the reporting account itself cautions that this is a threat-actor claim and not confirmation of a breach.DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list
Given the analyst assessment that such data could enable fake IDs, KYC bypass, and identity fraud, organizations relying on Jalisco license data for identity verification should monitor for confirmation and be alert to fraudulent use of license-derived identity material.DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list
Confirmed and still uncertain
Known: a forum post advertising a 12GB compressed dataset allegedly containing personal details, front-facing photos, and encoded signature images of Jalisco license holders, offered as a sample of a larger database at a price on request. The report was published on X on November 8, 2026.DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list
Unknown: whether the dataset exists or was genuinely obtained from Jalisco systems; the number of records affected; the actor's identity and access method; whether a sale has occurred; and any official response, since no record count was given and Jalisco authorities have not commented.DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list
What people are saying
DailyDarkWeb, the dark web monitoring account that surfaced the offer, states in its analyst note that this is an unverified threat-actor claim and explicitly not confirmation of a breach, while warning that faces plus signatures plus personal details would be a ready-made kit for fake IDs, KYC bypass, and identity fraud if real.DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list
Jalisco authorities have not commented on the alleged offering, according to the report.DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list
Evolution
The evidence batch contains a single data point: the November 8, 2026 post by DailyDarkWeb describing the forum offering. No prior history of the claim, subsequent verification, takedown, buyer activity, or official reaction is recorded in this batch.DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list
Reach
1 independent groups, 1 updates, and 0 engagements.DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list
Technical detail
According to the forum post as relayed, the offering is a 12GB compressed dataset described as part of the Jalisco driver's license database, containing personal information of license holders, front-facing photographs, and handwritten signatures stored as encoded images.DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list
The actor frames the dataset as only "a little part" of a larger database, suggesting the full alleged collection is bigger than the advertised sample. Pricing is on request, and no technical details about how the data was allegedly obtained were provided.DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list
Sources and evidence
This brief is based on a single source: a post on X by DailyDarkWeb (published November 8, 2026) reporting on a dark web forum advertisement. The original forum post was not directly accessed, and no independent corroboration, sample data review, or official statement is available in the evidence batch. All claims about the dataset itself remain unverified threat-actor assertions.DailyDarkWebx.com · DailyDarkWeb · xOpen original sourceSee in source list
Sources
- DailyDarkWebx.com · DailyDarkWeb · x



