Be Prime hit by cyberattack exposing 12.6 GB of client data

Be Prime, a Mexico-based cybersecurity company that provides connectivity and security services to clients including Iberdrola, ArcelorMittal, Whirlpool and Alsea, was reportedly the victim of a cyberattack that allegedly resulted in the leak of 12.6 GB of data and access to network infrastructure and video surveillance, according to information published by the supposed attacker on a cybercrime forum.

The attacker claims that administrator accounts were accessed without multifactor authentication, suggesting the breach exposed a basic yet critical security gap. DataBreaches[.]Net notes that Be Prime has acknowledged an attack but has not necessarily aligned with the social-media claims, and there is no found press release on Be Prime’s website.

The report also states that Be Prime has partly blamed the messenger and announced plans to initiate legal proceedings against journalists and media outlets that disseminated “false, inaccurate, or out-of-context information.” The piece, published on 20 April 2026 by Alberto Payo, highlights ongoing tensions between researchers, journalists and Be Prime in the wake of the incident.