Secretaría de Salud · Breach

MortemTeam claims database from Mexico's federal Ministry of Health

Oct 27, 2026 · 1 min read

A threat actor using the name MortemTeam posted an underground forum listing claiming to hold a database from Mexico's federal Ministry of Health (Secretaría de Salud), containing personal records, patient data and health-related information. The listing shows no record count, sample or price, and the claim has not been independently verified; DailyDarkWeb notes the data could be recycled from earlier Mexican leaks. No fix applies; monitor for verification and official statements.

By HIFY Radar newsroom Updated 10/27/2026 08:12 PM Get this every day →← Back to the feed 1 source

MediumBreachNo software to update

In this article

What happened
Why it matters
What to do
For the technical team
Timeline
Sources

What happened

An actor presenting itself as MortemTeam posted an underground forum listing titled 'Database Secretaría de Salud del Gobierno Mexicano', claiming to hold a database from Mexico's federal Ministry of Health. The listing mentions personal records, patient data and health-related information. The claim has not been independently verified.

Why it matters

If the data is real, it includes sensitive patient health information, usable for medical-themed phishing, extortion and identity fraud, according to DailyDarkWeb. The listing shows no volume, origin or price, and the data could be recycled from earlier Mexican health or government leaks. There is no official confirmation from the Secretaría de Salud so far.

What to do

No remediation applies while the claim remains unverified. Healthcare organizations operating in Mexico should raise awareness of medical-themed messages targeting patients and staff, and monitor channels verifying this leak.

For the technical team

Affected: Secretaría de Salud (Gobierno de México) Sistemas da Secretaría de Salud, o Ministério da Saúde federal do México; banco de dados com registros pessoais e dados · Secretaría de Salud del Gobierno Mexicano, per the actor's claim. No specific system, application or version was identified.
Exploitation: No technical exploitation reported. Database possession claim posted on an underground forum by the MortemTeam group, reported by DailyDarkWeb; incident logged on 2026-10-27. Not independently verified.
Fix: None. This is a leak claim with no identified vulnerability; no patch applies.
Vector: Unknown. The sources do not describe how the data was allegedly obtained and do not identify the source system.
More details: The captured post shows only the title and the group's logo: no record count, field list, sample or price. DailyDarkWeb assesses the data could be recycled from earlier Mexican health or government leaks. The same group recently claimed several Latin American state and provincial government databases. DailyDarkWeb's full source is subscribers-only.