Cyber Threat Actor: PandaLeaksMX

PandaLeaksMX is an alias that has been used in open‑source reports to refer to a threat actor whose known geographic location is Mexico. The alias appears in a single publicly available source that describes a cyber incident involving this actor. No alternative names, handles, or affiliations have been disclosed for PandaLeaksMX in any reputable reporting. All known information about the actor stems from the January 2023 incident targeting a Mexican judicial institution. Consequently, the actor’s profile is limited to the facts presented in that specific report.

On 14 January 2023, security monitoring tools detected a hacking attempt directed at the public website of the Poder Judicial de Nuevo León. The attempt was accompanied by the detection of a virus intrusion that triggered the institution’s predefined IT security response. In accordance with its protocol, the judicial body took all internal and external systems offline, including the Virtual Tribunal, to isolate the potential threat. As part of the response, more than seventy terabytes of stored data and over three thousand five hundred individual computers were subjected to disinfection procedures. Officials later stated that no data breach had occurred and that all information remained intact without any unauthorized extraction, deletion, or access.

The observed activity involved targeting a government‑facing website and introducing an unspecified virus. No specific malware families, exploit tools, or initial access vectors have been identified or disclosed in the available reporting. Because only this single incident has been documented, no broader campaign or series of operations can be attributed to PandaLeaksMX at present. Likewise, no public evidence links the actor to any state‑sponsored group, criminal consortium, or other known threat‑actor collective. Until additional credible sources provide further details, the understanding of PandaLeaksMX remains confined to the facts of the 2023 Nuevo León judicial website incident.