Home All Victims Grupo Herradura Occidente

Grupo Herradura Occidente

IMNCrew

This record tracks a ransomware attack claimed by the IMNCrew group against Grupo Herradura Occidente. It collects the publicly disclosed attack details — sector, location and timeline — as published on the operator's leak site and indexed by Breach House.

Country
Mexico
Business Category
Transportation / Travel / Logistics
Employees
101-1000
Discovered
2025-05-05
Published
May 05, 2025
Victim ID
DDSm3aecTu1l

Attack Summary

Grupo Herradura Occidente is a Mexican transportation company formed in 2007 through the merger of two long-established companies: Autotransportes Herradura de Plata (founded in 1945) and Grupo Occidente (founded in 1956). This fusion aimed to create a more profitable, productive, and efficient organization capable of facing financial and global changes at that time. The company operates a modern fleet of over 780 buses, including brands like Volvo, Mercedes Benz, and MAN, and transports more than 20 million passengers annually. It offers three service modalities: Plus, economic, and suburban.The company is based in Mexico City and is active in the truck transportation industry .Grupo Herradura Occidente is known for its significant presence in the Mexican transportation sector, particularly in passenger bus services, and it has a substantial vehicle fleet and passenger volume. However, some employee reviews mention challenges related to workplace environment and management practices .In summary, Grupo Herradura Occidente is a key player in Mexico’s passenger and truck transportation industry, with a history rooted in two legacy companies and a large, modern fleet serving millions of passengers yearly.

Visit Website Original Post View Group: IMNCrew
Legal Disclaimer: This ransomware victim record reflects information published on the operator's leak site. Breach.house does not acquire, download, host, access or redistribute unlawfully obtained data. It indexes only publicly visible information posted by ransomware, breach and infostealer operators and open web sources, without accessing the underlying stolen content. The service supports public awareness, legitimate research and cyber-resilience.