Suposta base de carteiras de motorista da… · Breach

[Single source] Claim: Actor Offers Alleged Mexico City Driver’s License Database

Nov 12, 2026 · 1 min read

A threat actor is offering what it calls the full Mexico City driver’s license database, claiming 5.8 million records containing personal and biometric data. DailyDarkWeb says the claim is unverified and does not confirm a breach; the data’s authenticity should be verified.

By HIFY Radar newsroom Updated 11/12/2026 11:05 AM Get this every day →← Back to the feed 1 source

CriticalBreachNo software to update

In 30 seconds

Alleged

DailyDarkWeb reports that a threat actor is advertising an alleged Mexico City driver’s license database containing 5.8 million records. The claim remains unverified and does not confirm that any government system was breached.

What happened

Alleged

According to the advertisement described by DailyDarkWeb, the offered records include identity, contact and license information, along with a facial photo, signature and fingerprints for each license. The evidence does not independently establish that the seller possesses this material.

Why it matters

Inferred

If authentic, a collection combining CURP identifiers, addresses and biometric information could support identity fraud, SIM swaps or extortion. Unlike a password, fingerprints and other biometric traits cannot simply be replaced after exposure.

What to do

Inferred

The available evidence does not justify assuming that every Mexico City license holder was exposed. People concerned about the claim can watch for official notices, treat unexpected account-recovery or mobile-service requests with suspicion, and avoid sharing additional identity documents in response to unsolicited messages.

Confirmed and still uncertain

Observed

What is observable is a public report describing a seller’s claims. The batch provides no independent sample validation, victim confirmation, breach date, access method, price, transaction evidence or official response, so the database’s authenticity and origin remain unknown.

What people are saying

Observed

DailyDarkWeb explicitly characterizes the report as an unverified threat-actor claim rather than confirmation of a breach. It also warns that the alleged combination of government identifiers and biometrics could create lasting fraud risks if genuine.

Evolution

Observed

The evidence chain currently begins and ends with DailyDarkWeb’s description of the alleged sale. No later corroboration, technical validation or confirmation from Mexico City authorities appears in the supplied batch.

Reach

Observed

1 independent groups, 1 updates, and 2 engagements.

Technical detail

Alleged

The claimed fields include full name, CURP, sex, birth date, blood type, nationality, home address, postal code, phone number, license type, issue and expiry dates, issuing office, transaction type, front photo, signature and fingerprints. No schema, sample records or forensic details are included in the supplied evidence.

Sources and evidence

Observed

The only substantive evidence supplied is a DailyDarkWeb post on X with an attached image and a reference to subscriber-only source material. Because the underlying listing and data samples are not present in the batch, the sale, dataset and any breach attribution cannot be independently assessed here.