Grupo Herradura Occidente
IMNCrewThis record tracks a ransomware attack claimed by the IMNCrew group against Grupo Herradura Occidente. It collects the publicly disclosed attack details — sector, location and timeline — as published on the operator's leak site and indexed by Breach House.
Window Zero
EXPOSURE GAPWindow Zero is the time the breach stayed in the open before anyone said so — the gap between when the attack was first discovered on the operator's leak site (t1) and when it was publicly disclosed (t2). The wider this window, the longer victims, staff and customers were exposed with no warning.
Attack Summary
Grupo Herradura Occidente is a Mexican transportation company formed in 2007 through the merger of two long-established companies: Autotransportes Herradura de Plata (founded in 1945) and Grupo Occidente (founded in 1956). This fusion aimed to create a more profitable, productive, and efficient organization capable of facing financial and global changes at that time. The company operates a modern fleet of over 780 buses, including brands like Volvo, Mercedes Benz, and MAN, and transports more than 20 million passengers annually. It offers three service modalities: Plus, economic, and suburban.The company is based in Mexico City and is active in the truck transportation industry .Grupo Herradura Occidente is known for its significant presence in the Mexican transportation sector, particularly in passenger bus services, and it has a substantial vehicle fleet and passenger volume. However, some employee reviews mention challenges related to workplace environment and management practices .In summary, Grupo Herradura Occidente is a key player in Mexico’s passenger and truck transportation industry, with a history rooted in two legacy companies and a large, modern fleet serving millions of passengers yearly.
Leak Screenshots
SAMPLEProof-of-breach screenshots the operator posted from the stolen data. Previews are redacted and locked — the originals are available on HaveIBeenRansom.