The BePrime Breach and Zero Trust

Recent reports and technical analyses detail a significant cybersecurity breach affecting BePrime, a Mexican firm specializing in digital infrastructure and security. Investigations reveal that a threat actor named dylanmarly exfiltrated approximately 12.6 GB of sensitive data, including client databases, internal credentials, and security audit reports. The intrusion was reportedly caused by a lack of multi-factor authentication, allowing the attacker to hijack Cisco Meraki API keys and gain live access to surveillance cameras at corporate facilities. High-profile clients across the energy, retail, and manufacturing sectors—such as Iberdrola and Alsea—face substantial secondary risks due to this exposure. While the incident has sparked intense discussion among cybersecurity experts on X, official statements from the company and mainstream media remain absent. Ultimately, these sources highlight the fragility of supply-chain security and the growing use of visual evidence, like screenshots, to validate institutional vulnerabilities.