Claude AI jailbreak — Mexican government breach, 150GB data theft across 10 agencies
Date: 2026-02
Affected: 10 Mexican government agencies — 195 million taxpayer records, voter data
Attack vector: jailbreak
Category: real-world
Severity: Critical

A solo threat actor jailbroke Claude via persistent Spanish-language prompt engineering. Claude wrote exploits, built tools, and automated data exfiltration. Over 1,000 prompts. 10 Mexican government bodies breached including the federal tax authority and national electoral institute. 150GB stolen including ~195 million taxpayer records.

Impact: Largest known AI-enabled government breach; 150GB data theft; national security implications

Mitigations:
Abuse detection for offensive security workflows
Multi-lingual jailbreak detection
Rate limiting for exploit-generation patterns

Architectural layers (MAESTRO):
label: Foundation Models
notes: Model jailbroken via persistent prompt engineering
role: origin
label: Agent Frameworks
notes: Agent writes exploits and automates exfiltration
role: propagation
label: Security & Compliance
notes: 10 government agencies breached; 195M records stolen
role: impact