Aero Mexico (Partial) Breach

The incident is one of several breaches affecting Salesforce in 2025. A group calling itself "Scattered LAPSUS$ Hunters" released a limited sample of the stolen database on October 3, 2025. The records have since been indexed and anonymized in our search engine.

According to the attackers, the full dataset is scheduled for release on October 10, 2025.

Data found in hackers’ sample -

🧍 Personal Information

• Full name
• Date of birth / age
• Gender
• Nationality

🪪 Identification Data

• Passport number
• Customer ID number

📧 Contact Information

• Email address(es)
• Mobile phone number

✈️ Travel & Transaction History

• Origin and destination airports
• Flight dates (first/last flight)
• Number of flights and reservations
• Fare class (e.g., economy/basic)
• Average ticket price and total payments
• Booking channel and agency name

💳 Account & Loyalty Data

• Customer status and type (active/inactive)
• Account creation date
• Marketing category (e.g., “inactive customer”)
• Language and currency preference

💬 Marketing & Consent Records

• Email/text/phone opt-in flags
• Consent status and date
• Source of account (“Analítica Avanzada”)

⚙️ System Metadata

• Salesforce record IDs and timestamps
• Owner / created by user ID
• Internal classification fields
• System sync and update flags