Data Breach News1 min read
Sensitive Government Data from San Andrés Cholula
By InsecureWeb Team
This report reflects observations of dark web activity. InsecureWeb makes no representations regarding the accuracy of this data.
Data Breach Summary
On May 27, 2025, a significant data breach was identified involving the San Andrés Cholula municipal government in Puebla, Mexico. An individual using the alias “aero” shared over 20 SQL database files on the dark web forum darkforums.st. These files, reportedly exported via phpMyAdmin, contain extensive sensitive information from the official municipal portal sach.gob.mx and its associated phpMyAdmin interface at declara.sach.gob.mx/phpmyadmin.
The breach includes a full database dump, with each table exported as a separate .sql file. The data is in Spanish and encompasses a wide range of personal and governmental information.
🔍 Contents of the Leak
The leaked data comprises:
- Personal records of municipal employees
- Asset declarations
- Employment histories
- Vehicle registrations
- User account details
Breach History
There is no public record of prior data breaches involving the San Andrés Cholula municipal government. However, this incident highlights potential weaknesses in their cybersecurity infrastructure, particularly concerning the protection of sensitive administrative data.
What is InsecureWeb?
InsecureWeb is a Dark Web monitoring service that keeps track of recent data breaches and tracks their impact by monitoring the darkest places of the internet.
Our commitment lies in providing top-notch cybersecurity services to our clients. Through continuous monitoring of the dark web and advanced threat detection methodologies, we strive to identify potential breaches promptly, enabling swift response and mitigation efforts. With our state-of-the-art tools and expertise, we prioritize the confidentiality, integrity, and availability of our clients’ data.
