m3rx ransomware group lists jichasa.com on its leak site

• Ransomware group: m3rx
• Country: Mexico
• Announcement date: May 27, 2026

A new victim listed on a ransomware leak site

The Mexico-based logistics company jichasa.com has been listed on the leak site of the m3rx ransomware group. According to the announcement made on May 27, 2026, the threat actor claims to have successfully compromised the institution's data and has threatened to release the information publicly.

This type of announcement is a common tactic used by ransomware groups to exert pressure on their targets. By listing an organization on a public leak site, these actors aim to damage the victim's reputation and create urgency for a ransom payment. This specific incident involves a significant volume of data, according to the claims made by the threat actor.

Details of the claimed attack

The threat actor known as m3rx has posted an announcement claiming responsibility for the breach. The group asserts that they have gained access to the internal systems of jichasa.com. The announcement was officially made on May 27, 2026, which coincides with the date the group claims the attack took place.

While the group has made a public claim regarding the breach, specific details regarding the exact method of entry or the specific content of the leaked data have not been provided by the attackers. The group's presence on a leak site typically indicates a transition from a simple encryption-based attack to a data exfiltration-based attack, often referred to as a double-extortion scheme. In such schemes, attackers not only encrypt the victim's files but also steal sensitive information to use as leverage during negotiations.

Data volume and potential content

The m3rx group claims to have exfiltrated a substantial amount of information belonging to the organization. According to the group's announcement, the stolen data consists of the following:

• Total data size: 116 GB
• Total file count: 98,000 files

The listing does not provide specific details regarding the individual contents of these files. However, given the nature of the company's operations in logistics and customs consulting, it is assessed that trade data and customer information may be included in the stolen dataset.

About Jichasa Smart Logistics

Jichasa Smart Logistics is a logistics company that was established in 1980. The firm provides a wide range of services, including customs consulting, inventory management, and various supply chain solutions. They offer door-to-door logistics services to a diverse array of industries, such as the automotive, aerospace, electronics, and agriculture sectors.

Impact and industry implications

This incident may negatively impact the institution's operational continuity and commercial reputation. The potential exposure of sensitive information carries several risks. Customer and supply chain information potentially contained within the leaked data could be exploited for targeted phishing attacks against third parties. Furthermore, the institution may face legal liabilities under Mexican data protection regulations due to the potential exposure of sensitive information.

For organizations operating in the logistics and supply chain sectors, such incidents highlight the critical importance of robust cybersecurity frameworks. Protecting the integrity of trade data and customer information is vital for maintaining trust with partners in the automotive, aerospace, and other highly regulated industries. Common defensive steps for organizations to mitigate such risks include implementing multi-factor authentication, maintaining regular offline backups, and conducting regular security audits to identify vulnerabilities in the supply chain software and communication channels.

Information regarding the m3rx group remains limited, making it difficult to attribute the attack to a specific known threat actor profile beyond their current activities on leak sites.