x.com/ns123abc/status/2026679645379141953
2 corrections found
hack the entire mexican government
Available reporting describes a breach spreading from Mexico’s tax authority to a limited number of additional institutions—not the “entire mexican government.”
Full reasoning
The post states the attacker “hack[ed] the entire mexican government.” But Gambit Security’s Feb 25, 2026 disclosure (about the same incident and the AI-assisted attack path) describes a breach that began with Mexico’s tax authority and then impacted “ten government bodies and one financial institution” within a month—not the entire government.
Because “entire mexican government” is an absolute claim about scope, and the cited incident description gives a much narrower, quantified scope, the post’s wording is inaccurate.
1 source
- Gambit Security Raises $61M to Set The Standard for Enterprise Resilience | Newswire (Feb 25, 2026)
“Within a month of the initial compromise, ten government bodies and one financial institution were affected…”
195 million taxpayer records.
The “195 million” figure tied to this incident is described as “identities exposed,” not “taxpayer records.”
Full reasoning
The post claims “195 million taxpayer records.” However, Gambit Security’s incident description characterizes the “195 million” figure as “identities exposed” and separately lists data types involved (tax records, civil registry files, voter data). In other words, the 195 million number is not presented as a count of taxpayer records.
This makes the post’s phrasing (“195 million taxpayer records”) a specific numerical claim that doesn’t match the described figure (identities, spanning multiple datasets beyond tax records).
1 source
- Gambit Security Raises $61M to Set The Standard for Enterprise Resilience | Newswire (Feb 25, 2026)
“…approximately 195 million identities exposed, and roughly 150GB of data exfiltrated: tax records, civil registry files, voter data.”