Governo do Estado de Campeche · Breach

Campeche government: MortemTeam-linked actor claims database theft

Oct 29, 2026 · 1 min read

A threat actor working with the MortemTeam group claims to have breached the government of Campeche state, Mexico, and extracted its database, advertised on an underground forum. The listing shares no size, source systems, or record types; no sample has been verified and the state government has not commented. If genuine, residents and state employees could face phishing that impersonates Campeche services; treat it as an unverified threat-actor claim.

By HIFY Radar newsroom Updated 10/29/2026 09:11 PM Get this every day →← Back to the feed 1 source

MediumBreachNo software to update

In this article

What happened
Why it matters
What to do
For the technical team
Timeline
Sources

What happened

A threat actor working with the MortemTeam group claims to have breached the government of Campeche, Mexico, and extracted its database, now advertised on an underground forum. The listing shares no size, source systems, or record types. No sample has been verified and the state government has not commented.

Why it matters

This is an attacker claim, not confirmation of a breach. If the data is real, Campeche residents and state employees could face phishing that impersonates state services. Companies with customers or staff in the region should factor in targeted fraud risk.

What to do

Watch credential-checking services and forums for Campeche samples before communicating risk. Reinforce anti-fraud alerts and verification of messages claiming to come from state services. Do not treat the compromise as confirmed.

For the technical team

Affected: Governo do Estado de Campeche (México) Base de dados do governo do estado de Campeche, México; alegação de invasão e extração por ator ligado ao grupo MortemTe · Government of the State of Campeche, Mexico; source systems and agencies not specified in the listing.
Exploitation: No technical exploitation described. Claim reported by @DailyDarkWeb: an actor working with MortemTeam says it extracted the database; no sample verified and the state government has not commented.
Fix: Not applicable (alleged data breach).
More details: The post credits a second collaborating group and advertises the database in an underground forum listing. @DailyDarkWeb notes MortemTeam has posted several Mexican and Latin American government databases in recent weeks, so overlap with older leaks is possible. It recommends treating this as an unverified threat-actor claim, not confirmation of a compromise of Campeche government systems.