Aeroméxico clarifies situation regarding its user data leak
The airline Aeroméxico has issued an official statement to clarify the recent controversy that arose following the appearance of a database on the Telegram application. The company confirmed that the exposed information corresponds to a cybersecurity incident recorded in October 2025, which was part of a wave of cyberattacks that impacted multiple business sectors globally.
Details regarding the compromised information
According to the company, after a preliminary analysis, the exposure of sensitive financial data has been ruled out. Users can rest assured regarding their bank accounts, payment cards, passwords, or specific details about their flight itineraries, as this information was not compromised.
However, the airline acknowledged that the leaked records do contain basic personal data, such as:
- Full names of the clients.
- Email addresses.
- Phone numbers.
- Dates of birth (in selected cases).
In our case, the unauthorized access occurred on a customer information management platform managed by a third-party provider. From the moment we became aware, we activated our response protocols and implemented the corresponding mitigation measures.
Official statement from Aeroméxico
Legal actions and continuous monitoring
In light of the alert issued by Mexico’s Secretariat of Anti-Corruption and Good Governance, which pointed to the existence of a database containing more than 15 million records, Aeroméxico has reiterated its commitment to cybersecurity. The company is currently working in conjunction with the external provider to strengthen containment levels and prevent future incidents.
The airline emphasized that it maintains constant monitoring of the situation and is collaborating closely with the competent authorities. Likewise, they have expressed their intention to take the necessary legal actions against anyone responsible for illicit activities involving the integrity of their passengers’ information.
