Aeroméxico data breach
Was I affected?
Aeroméxico confirmed a breach involving up to 15 million records (duplicates possible), exposing names, dates of birth, email addresses and phone numbers. You may be affected if you have an Aeroméxico customer or Aeroméxico Rewards account, or booked with the airline before late 2025.
| Announced | Sep 20, 2026 |
|---|---|
| When it happened | October 2025 (vendor platform incident, per Aeroméxico) |
| Country | Mexico |
| Records exposed (may include duplicates) | 15 million |
| Data exposed | Names, Dates of birth, Email addresses and Phone numbers |
| Status | Confirmed by the company or a regulator filing |
What happened
Mexico's Ministry of Anti-Corruption and Good Governance (SABG) said on September 20, 2026 that a Telegram user had posted on September 18 a 1.1 GB database said to belong to Aeroméxico, with more than 15 million records; the ministry obtained a sample of 100,092 records and opened an investigation. Aeroméxico said the data appears to come from a cyberattack in October 2025 on a customer-data platform run by an outside provider, during a wider international hacking campaign, and that it is still checking the file's authenticity and scope. The data includes names and, in some cases, dates of birth, email addresses and phone numbers. Aeroméxico says it has found no exposure of bank or card details, passwords (including Aeroméxico Rewards) or flight itineraries. The 15 million figure counts records, not confirmed unique customers.
What should I do?
- Expect phishing emails, WhatsApp messages and calls that use your name and birth date and pretend to be Aeroméxico; don't share passwords, verification codes or card numbers.
- Check any message about refunds, miles or bookings by logging in at aeromexico.com or the app directly, not through links.
- Turn on two-step verification for the email account tied to your Aeroméxico profile.
- Send questions to Aeroméxico's security contact, contacto.seguridad@aeromexico.com.
Check the other services you use →
Sources
- Investiga SABG venta de datos de clientes de Aeroméxico (Anti-corruption ministry investigates sale of Aeroméxico customer data) · Excélsior (in Spanish) · news
- Aeroméxico adjudica exposición de datos de clientes por Telegram a un ciberataque (Aeroméxico attributes exposure of customer data to a cyberattack) · Expansión (in Spanish) · news
- Aeroméxico investigates possible leak of 15 million passenger records · Mexico News Daily · news
- Una base de 1.10 GB atribuida a Aeroméxico circula en Telegram y México ya investiga si los datos son reales (A 1.10 GB database attributed to Aeroméxico circulates on Telegram) · Xataka México (in Spanish) · news