financial institution

Profile narrative

The organisation is identified only as a financial institution headquartered in Mexico. The available material does not provide its legal name, brand name, or more specific classification within the financial sector. Because of that limitation, its core products and services cannot be confirmed beyond its role as a financial-sector entity. No specific retail banking, corporate banking, payments, lending, investment, insurance, or asset-management activities are stated in the source context. The organisation's customer base, operating regions, branch network, digital channels, and market share are also not provided. The only confirmed scale-related detail is its location in Mexico and its inclusion in an incident involving Mexican organisations.

The organisation is notable in the available context because it was among the entities compromised in a 2025 cyberattack campaign. The campaign reportedly targeted ten Mexican government bodies and a financial institution, beginning with the tax authority. The attackers used Anthropic's Claude Code assistant and OpenAI's GPT-4.1 to support exploit development, tool building, analysis, and automated data exfiltration. The activity involved more than 1,000 prompts, according to the incident overview. The campaign exfiltrated more than 150GB of data within a month and exposed data categories including civil registry, tax, and voter records. The overview states that roughly 195 million identities were exposed in the broader incident. The provided context does not specify whether the financial institution's own customer data was included in the exposed datasets. It also does not state the institution's ownership, parent company, subsidiaries, regulatory status, or any formal relationship to the government bodies affected.

Incidents

1 incident linked to this organisation.