Ransom! Cinvestav

The threat actor coinbasecartel targeted Cinvestav in Mexico, demanding ransom through ransomware. The Centro de Investigaci,ón y de Estudios Avanzados del Instituto Politécnico Nacional, a public Mexican institution focused on advanced research, was impacted. #Mexico

Incident Details

  • Victim: Cinvestav
  • Country: MX
  • Actor: coinbasecartel
  • Source: http://fjg4zi4opkxkvdz7mvwp7h6goe4tcby3hhkrz43pht4j3vakhy75znyd.onion/companies/cinvestav
  • Discovered: 2025-11-13 14:18:54.055661
  • Published: 2025-11-13 14:18:39.087613

Information

  • The victim is Cinvestav, a public Mexican institution focused on research and advanced studies.
  • The incident involves a ransomware attack.
  • The actor responsible for the attack is identified as coinbasecartel.

Disclaimer: This post is based on public claims made by the ransomware group "coinbasecartel". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.

monitored by: ransomware.live