Aeroméxico clarifies situation regarding its customer data leak
The airline Aeroméxico has recently issued a statement following alerts released by Mexican authorities regarding an alleged leak of its users’ personal information. The company explained that the incident is linked to a database stolen during a cybersecurity event recorded in October 2025, which was part of an international campaign of digital attacks that impacted multiple industrial sectors.
Details regarding the compromised information
In an official statement, the airline clarified that, following preliminary investigations, no exposure of sensitive financial data has been detected. This includes the protection of bank accounts, payment cards, passwords, or specific details regarding passengers’ flight itineraries. However, the company acknowledged that the information circulating on digital platforms could contain basic contact data.
- Full names of the clients.
- Email addresses.
- Phone numbers.
- Dates of birth (in specific cases).
Origin of the incident and security measures
Aeroméxico detailed that the unauthorized access originated from a data management platform administered by an external provider. According to the company, at the moment the vulnerability was detected in 2025, the necessary response and mitigation protocols were immediately activated to secure its internal systems.
From the moment we became aware of this situation, we activated our response protocols and implemented the corresponding mitigation measures. We are maintaining close collaboration with the authorities to reinforce containment actions and take the necessary legal measures against those responsible.
Official statement from Aeroméxico
The airline’s stance comes after Mexico’s Secretariat of Anti-Corruption and Good Governance warned about the circulation of a database that allegedly contains more than 15 million user records, with an approximate size of 1.10 gigabytes. Currently, the company claims to be maintaining permanent monitoring and is working in conjunction with the authorities to clarify the full scope of this event and ensure the safety of its community of travelers.
