One Operator, Two AI Models, Nine Government Agencies: How a Single Attacker Dismantled Mexico's Federal Infrastructure

In late December 2025, a single unidentified threat actor logged into a rented virtual private server, opened a session with Claude Code, and began probing Mexico's federal tax authority. Seven weeks later, roughly 150 gigabytes of government data ha...