Experts Reported Hack Against PEMEX Server Network

Cybersecurity experts have raised concerns over a reported breach at PEMEX, alleging the exposure of a database tied to the company's electronic invoicing system, potentially impacting the personal data of its customers.

Víctor Ruiz, CEO and Founder, Silikn, urged the state-owned company to take prompt action, emphasizing the importance of implementing appropriate measures, transparent communication, and safeguarding citizen data, via his X account.

According to Ruiz, the authenticity of the leaked database, circulating on various online platforms, was verified, prompting questions about the security of individuals' information.

This incident follows a similar breach in December 2022, when PEMEX faced a cyberattack resulting in unauthorized access to sensitive employee information. During that breach, the Mexican Petroleum Workers' Union (STPRM) inadvertently shared confidential files, leading to the accidental exposure of electronic records.

More recently, on Jan. 27, 2024, Ruiz highlighted the apparent data leak concerning over 300 journalists attending President Andrés Manuel López Obrador's morning press briefings. Authorities disclosed that the leaked information was reportedly sourced from Spain, allegedly involving the misuse of credentials belonging to a former employee, which were later revoked.

Despite denying the authenticity of certain leaked lists, PEMEX has committed to conducting a thorough investigation into the matter. However, details on the progress of the investigation remain undisclosed.