Be Prime breach claims expose client data and surveillance system access

Mexican IT and cybersecurity provider Be Prime disclosed a cyberattack after a threat actor using the alias dylanmarly posted alleged proof of compromise on a cybercrime forum. The attacker claimed to have accessed Be Prime administrative accounts, Cisco Meraki Vision surveillance systems, Meraki API keys, and thousands of network devices, and to have leaked 12.6 GB of data linked to Be Prime and some of its clients. Public reporting said the intrusion may have involved administrator accounts without multifactor authentication, though Be Prime did not confirm those specific allegations.

Be Prime said it activated containment, mitigation, investigation, and remediation measures with support from Cisco Talos, and stated that it had found no evidence so far of disruption to its own operations or those of customers. At the same time, the company warned it could pursue legal action against parties spreading what it described as false or out-of-context claims about the incident, a response that drew criticism from researchers and journalists who argued that threatening reporters and whistleblowers could intensify scrutiny of the breach and its potential impact on client data and video surveillance exposure.