Hacktivist group
SpeakTeam
Origin: Mexico Status: Active
Confidence: Confirmed
SpeakTeam is a Spanish-language data-breach and leak collective observed in early 2026 targeting Mexican education, government, finance, telecommunications and other institutions. Public artifacts associate the group with MagoSpeak and Z3r00, while independent victim-side confirmation remains uneven across the claimed campaign.
INFERENCE (confidence: medium): The current profile should be updated through event-level validation rather than by inheriting capabilities from associated personas, channels or adjacent ecosystems.
ATT&CK
MITRE ATT&CK
T1213Data from Information Repositories
T1530Data from Cloud Storage
T1657Financial Theft
Research