Leaked information was from a public email: National Defense

The Secretary of National Defense (Sedena) indicated that all the information obtained after the hacking of the institution is public and does not significantly affect the owners of the personal data disclosed.

Sedena delivered official letter AC/T25/ to the National Institute of Transparency, Access to Information and Protection of Personal Data (Inai) in order to report on the status of the unit after the hacking carried out by the international group called Macaws.

“It is information of a public nature,” reported Sedena.

“It does not constitute a violation that significantly affects the patrimonial or moral rights of holders of personal data, the foregoing, because it is information of a public nature, as it is a means of communication within this obligated subject to transmit messages of unclassified content,” he added.

Sedena’s official letter derives after the Inai indicated that, after the hacking suffered, the military institution was obliged to report the details of the event.

Since, according to the General Law on the Protection of Personal Data Held by Obliged Subjects, Sedena must inform the entire society and in particular all the people who may be vulnerable or exposed after the leak of the information.

Personal information

The Sedena announced in the aforementioned official letter that the institutional email that was violated is not linked, nor linked to systems related to the processing of personal data, but rather is only a means that allows the exchange of information.

However, it indicated that the affected administrative areas are analyzing the content of the violated information to rule out that it is information that could be classified as reserved or that contains personal data.

He added that since the detection of “a possible violation”, the General Directorate of Informatics of the Sedena blocked the agency’s institutional email service, beginning with the collection of evidence in coordination with the analysis and security areas.

“Digital forency analyzes have been carried out to identify the vulnerabilities that allowed unauthorized access and to reinforce computer security measures.”

diego.aguilar@eleconomista.mx