Mexico.- The Mexican airline Aeroméxico stated this Monday that the leak of an alleged database of its customers corresponds to “data stolen during an incident recorded in October 2025“, which occurred “in the context of an international cyberattack campaign that affected companies in various sectors“.
The company maintained in a statement that the alleged database circulated on the Telegram messaging application has not identified exposure of financial data, such as bank accounts or payment cards, nor of passwords or information related to flight itineraries.
However, he acknowledged that the information “allegedly involved” includes names and, in some cases, dates of birth, email addresses, and phone numbers.
You can also read: Mexico identifies personal data leak from Aeromexico
Among the preliminary findings, Aeroméxico highlighted that the information offered could be linked to data stolen in an incident recorded in October 2025, which, it said, affected various sectors, including global technology companies.
“In our case, the unauthorized access occurred on a customer information management platform managed by a third-party provider,” he explained regarding that event.
“From the moment we became aware of this situation, we activated our response protocols and implemented the corresponding mitigation measures,” he added.
He also clarified that, at that time, “the disclosure of Aeroméxico customer data by cybercriminals did not materialize“.
Aeroméxico reported that it is working with its provider “to reinforce containment actions” and that it maintains a “permanent monitoring of the situation“.
Likewise, he highlighted his collaboration with the competent authorities and that he will exercise “the appropriate legal actions against those who are found responsible for any illicit conduct“.
The response from Mexico’s largest airline comes after Mexico’s Secretariat of Anti-Corruption and Good Governance warned on September 20 of a possible exposure of personal data in a system allegedly linked to the company.
According to the agency, it is a database with more than 15 million customer records of the company and a size of 1.10 gigabytes.



