Illustration: Group claims leak of data from 144 Guerrero agencies via SICECO
Governo do estado de Guerrero · Breach

Group claims leak of data from 144 Guerrero agencies via SICECO

· 1 min read

A group on a dark web forum claims to have leaked user and employee data from SICECO, the project-control platform of Guerrero's state government in Mexico. The post lists 144 agencies, including the Attorney General's Office and the Secretariat of Public Security, with full name, phone, email, username and access level. The claim is unverified; the same group posted an alleged leak from Guerrero's education ministry in mid-October.

WhatsApp LinkedIn X
MediumBreachNo software to update
In this article
  1. What happened
  2. Why it matters
  3. What to do
  4. For the technical team
  5. Timeline
  6. Sources

What happened

A group posted on a dark web forum an alleged leak of user and employee data from SICECO, the project-control platform of Guerrero's state government in Mexico. The post says the data covers 144 agencies, including the Attorney General's Office and the Secretariat of Public Security. Nothing is confirmed.

Incidents like this, every morning

The ones that need action first, in a 3-minute read.

Free · 1 email a day, in the morning · no spam, unsubscribe in 1 click

Why it matters

Listed fields include full name, phone, email, username and access level of public workers. Per the source, this data supports targeted phishing and intimidation at prosecutors, police and courts. It is the same group's second claimed leak against Guerrero state.

What to do

Notify the named agencies about the potential exposure, warn staff against phishing that uses this data, and review SICECO accounts and access. Track confirmations and new posts by the group.

For the technical team

Affected
Governo do estado de Guerrero (México) SICECO, plataforma de controle e registro de projetos e ações do governo estadual · SICECO, platform for control and registration of projects and actions of Mexico's Guerrero state government.
Exploitation
Leak claim posted by a threat actor group on a dark web forum, not independently verified, per the source.
Fix
No software to update
More details
Fields listed: agency, username, full name, phone, email and access level. Agencies named: Attorney General's Office, Secretariat of Public Security, Administrative Justice Tribunal and Superior Court of Justice, Acapulco municipal water commission and a state lodging-tax trust. Per the source, the same group posted an alleged leak from the Guerrero State Ministry of Education (SEG) in mid-October, pointing to repeated targeting of state systems. The source stresses this is an unverified claim, not confirmation of a compromise of Guerrero state systems.

Timeline

  1. Incident opened.

Sources 1 source

Get the next one tomorrow morning

One email a day with what changed, what to fix first and how. After signing up you get the full feed.

Free · 1 email a day, in the morning · no spam, unsubscribe in 1 click

Share it with your team

Whoever handles security with you should get it too.

LinkedIn X

Your colleague gets a confirmation request. Nothing is sent unless they confirm.

See all news

Read also

Before you go: get this every day

The HIFY Radar daily edition lands every morning with the incidents that need action. Free.

Free · 1 email a day, in the morning · no spam, unsubscribe in 1 click