# INM (Instituto Nacional de Migración) - OSINT Findings

## Overview
- **Main Site:** https://inm.gob.mx/
- **Open Data Portal:** https://www.datos.gob.mx/organization/inm
- **Data Repository:** https://repodatos.atdt.gob.mx/api_update/inm/
- **WordPress API:** Not detected (404)

---

## API Infrastructure Discovered

### Directory Listing Exposed
**URL:** `https://repodatos.atdt.gob.mx/api_update/inm/`

8 directories accessible without authentication:

| Directory | Description | Last Modified |
|-----------|-------------|---------------|
| capacitacion_servidores_publicos_inm | Public servant training | Nov 2025 |
| estadisticas_control_verificacion_migratoria | Migration control stats | Nov 2025 |
| estadisticas_regulacion_migratoria | Migration regulation stats | Nov 2025 |
| migrantes_atendidos_grupos_beta_proteccion_migrantes | Beta Group assistance | Nov 2025 |
| personas_extranjeras_victimas_delito | Foreign crime victims | Nov 2025 |
| programa_paisano | Paisano program | Nov 2025 |
| programa_pesca_deportiva_turismo_nautico | Sports fishing permits | Nov 2025 |
| salida_menores_pais | Minors leaving country | Aug 2025 |

---

## Dataset Analysis

### Sensitive Datasets Examined

#### 1. Salida de Menores del País (Minors Leaving Country)
- **File:** `534_menores_viajan.csv`
- **Fields:** AGEE Code, Format Type, Year-Month, Count, Date
- **Assessment:** **AGGREGATED STATISTICS ONLY**
- Monthly counts by authorization type (SAM, notarial, judicial)
- NO individual names, passport numbers, or companion details

#### 2. Personas Extranjeras Víctimas de Delito (Foreign Crime Victims)
- **File:** `07_victimas_delitos_2015-062025.csv`
- **Fields:** Entity, Year-Month, Victim Count, Federal Entity, Date
- **Assessment:** **AGGREGATED STATISTICS ONLY**
- Monthly victim counts by Mexican state
- NO individual victim information

#### 3. Migration Regulation Statistics
- **Files:** Multiple CSVs including 293MB procedures file
- **04_documentos_migratorios_2024-2025.csv** (17.1 MB)
- **140_documentos_migratorios.csv** (18.7 MB)
- **141_tramites_migratorios.csv** (293.1 MB) - NOT EXAMINED (too large)

---

## Large File Alert

**File:** `estadisticas_regulacion_migratoria/141_tramites_migratorios.csv`
**Size:** 293.1 MB
**Status:** Not examined - could contain individual migration procedure records
**Recommendation:** Download and analyze for potential PII

---

## Download URLs

```
# Minors traveling
https://repodatos.atdt.gob.mx/api_update/inm/salida_menores_pais/534_menores_viajan.csv

# Foreign crime victims
https://repodatos.atdt.gob.mx/api_update/inm/personas_extranjeras_victimas_delito/07_victimas_delitos_2015-062025.csv

# Migration procedures (LARGE)
https://repodatos.atdt.gob.mx/api_update/inm/estadisticas_regulacion_migratoria/141_tramites_migratorios.csv
```

---

## Conclusion

INM datasets examined contain **aggregated statistical data only** - no individual PII exposure confirmed. However:

1. Directory listing enables enumeration of all INM data assets
2. Large 293MB file remains unexamined
3. API structure could be probed for additional endpoints

**PII Risk Level: LOW** (based on examined files)

---

*Research Date: January 2026*
