MiPC Mexico Data Breach
The 2024 MiPC Mexico data breach occurred in October 2024 when customer and purchase fulfillment databases from MiPC Mexico (mipc.com.mx), a prominent Mexican electronics and computer hardware retailer, were breached and published on cybercrime forums.
Exposed Data Types
8- Email addresses
- Names
- Phone numbers
- Physical addresses
- Government issued IDs
- Dates of birth
- Genders
- Purchases
About This Breach
What information was affected in the MiPC Mexico incident?
The leaked customer profiles (users.csv) and order logs (orders.csv) incorporate records for consumer and corporate buyers across Mexico. The incident compromised records for 78,099 unique customers, exposing:
- Personal & Identity Information: Full customer names and declared gender.
- Government Tax Identifiers: Mexican federal taxpayer identification numbers (RFC / VAT numbers).
- Contact Credentials: Canonical email addresses and direct phone numbers.
- Physical Addresses: Complete billing and shipment destination addresses, cities, Mexican states, and postal codes (CP).
- Demographic Records: Dates of birth (Fecha de Nacimiento).
- Purchasing History: Hardware order details and retail transaction records.
How many accounts were affected?
Rigorous RFC canonical parsing and deduplication confirmed 78,099 unique valid email addresses.
Technical analysis and security risks
The structured export originated from the merchant's Magento e-commerce platform. Exposing verified federal tax codes (RFC) linked directly to residential delivery addresses and phone numbers creates immediate opportunities for targeted package delivery phishing scams, fraudulent invoicing, and tax identity deception.
Recommended actions for affected users
Customers who purchased hardware from MiPC Mexico should:
- Exercise caution regarding unsolicited notifications or phone calls referencing their electronics purchases or demanding parcel clearance payments.
- Monitor their fiscal tax filings (SAT RFC portal) for unrecognized invoices or declarations.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
