The threat actor coinbasecartel targeted Cinvestav in Mexico, demanding ransom through ransomware. The Centro de Investigaci,ón y de Estudios Avanzados del Instituto Politécnico Nacional, a public Mexican institution focused on advanced research, was impacted. #Mexico
Incident Details
- Victim: Cinvestav
- Country: MX
- Actor: coinbasecartel
- Source: http://fjg4zi4opkxkvdz7mvwp7h6goe4tcby3hhkrz43pht4j3vakhy75znyd.onion/companies/cinvestav
- Discovered: 2025-11-13 14:18:54.055661
- Published: 2025-11-13 14:18:39.087613
Information
- The victim is Cinvestav, a public Mexican institution focused on research and advanced studies.
- The incident involves a ransomware attack.
- The actor responsible for the attack is identified as coinbasecartel.

Disclaimer: This post is based on public claims made by the ransomware group "coinbasecartel". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.