Mexico and Colombia face cyberattacks that exposed personal data of social program beneficiaries and utility customers

Mexico's Digital Transformation Agency confirmed an unauthorized access to its social‑program databases using legitimate operational credentials. The breach exposed personal details of beneficiaries of schemes such as the senior‑pension programme, women’s welfare, and youth training, including CURP, tax ID, phone numbers, addresses and photographs of individuals holding bank cards. The agency blocked the compromised accounts and launched an investigation.

In Colombia, contractor SOLATI disclosed a hack that affected its own servers after an international criminal group infiltrated the firm. While the core systems of public utilities Empresas Públicas de Medellín (EPM) and Central Hidroeléctrica de Caldas (CHEC) remained intact, personal but non‑sensitive information from their client portfolios was extracted and partially published. SOLATI issued a statement rejecting extortion, saying “No negociamos con el crimen,” and activated security protocols while cooperating with authorities.