THREATSMexico
Grupo Xcaret reports systems breach
Grupo Xcaret said its sales systems were breached and some customers’ contact details and mobile numbers were taken.
Nov 4, 2026 · 2 min
Threats — News
Up-to-date cyber intelligence coverage. Filter by category or browse the full archive.
THREATSMexico
Mexico logs 60 critical ransomware victims
Entel Digital counted 60 Mexican critical infrastructure organizations hit by ransomware from January 2025 through September 2026.
Oct 30, 2026 · 4 min
THREATSMexico
UNM Health restored systems after cyberattack
UNM Health restored its systems and said it did not pay ransom after an incident that diverted ambulances and canceled appointments.
Oct 29, 2026 · 3 min
THREATSMexico
CyberCartel Linked to Mexico's SPEI
Straiker linked CyberCartel to credentials and keys that could support SPEI-linked activity in Mexico, without confirming a victim
Oct 29, 2026 · 2 min
THREATSMexico
CyberCartel hit 400 Latin American institutions
Straiker linked CyberCartel to AI-driven attacks against more than 400 Latin American institutions, including banks and payment apps.
Oct 29, 2026 · 2 min
THREATSMexico
Qilin targets Airbus SLC Mexico
Qilin added Airbus SLC Mexico to its leak site, but there is no independent verification of a breach, exfiltration
Oct 28, 2026 · 2 min
THREATSMexico
Mexico: AI and IT exposed OT risk
A Monterrey water utility breach led to failed attempts to reach an OT gateway. New technical details add context.
Oct 26, 2026 · 3 min
THREATSMexico
Straiker Links Mexico to CyberCartel
Straiker linked CyberCartel to attacks on more than 400 financial institutions in Latin America and found references to Mexico
Oct 23, 2026 · 4 min
THREATSMexico
Mexico warns of bank app and site fraud
Alerts in Mexico point to cloned bank sites and altered apps that steal credentials, tokens and personal data, even with biometrics.
Oct 22, 2026 · 2 min
THREATSMexico
Hirudo now tracks 42 Android finance apps
PCrisk says Hirudo tracks 42 financial apps and now has dedicated replacements for eight Indonesian banking apps.
Oct 21, 2026 · 2 min
THREATSMexico
Qilin exposed three Mexican companies
ACSec identified Victoria water utility, MCM Telecom and Price Shoes as Mexican victims disclosed by Qilin.
Oct 14, 2026 · 2 min
THREATSMexico
COMAPA Victoria linked to Qilin
ACSec, Víctor Ruiz and FalconFeeds.io attributed a supposed Qilin attack to COMAPA Victoria, without independent confirmation.
Oct 14, 2026 · 1 min
THREATSMexico
Condusef: $11.2B in bank fraud claims in Mexico
Mexican bank customers reported 11,213 million pesos in possible fraud claims in the first half of 2026, according to Condusef.
Oct 11, 2026 · 2 min
THREATSMexico
MCM Telecom appears in Qilin listings in Mexico
ACSec and Darkfield list MCM Telecom as a recent Qilin-linked victim in Mexico, though there is no independent confirmation of the incident.
Oct 10, 2026 · 1 min
THREATSMexico
ASEA reports hack of official Instagram
ASEA said its @agencia_asea Instagram account was compromised and asked the public to ignore posts while it works to regain access.
Oct 6, 2026 · 2 min
THREATSMexico
Mexico accounted for 52 ransomware attacks
SCILabs recorded 290 ransomware attacks in Latin America in the first half of 2026. Mexico accounted for 17.93%, with finance in focus.
Oct 4, 2026 · 4 min
THREATSMexico
Mexico: SAFEPAY Added Auromex
SAFEPAY added Mexican manufacturer Auromex to its leak site. Security Arsenal also documented the group’s TTPs, and a note cited SCILabs.
Oct 2, 2026 · 2 min
THREATSMexico
Mexico probes sale of 12.9 million records
Mexico is investigating Telegram posts offering 12.9 million personal records tied to call centers, and in some cases bank data.
Sep 27, 2026 · 2 min
THREATSMexico
Mexico Ranked Second in LATAM Ransomware
Mexico logged about 52 ransomware attacks in the first half of 2026, ranking second in Latin America, according to SCILabs.
Sep 26, 2026 · 4 min
THREATSMexico
INCAN restores radiotherapy after cyberattack
INCAN said radiotherapy has been back to normal since Sept. 11 after a cybersecurity incident affected the unit.
Sep 22, 2026 · 2 min
THREATSMexico
Mexico investigates Aeroméxico data leak
Mexico’s anti-corruption office is investigating a possible leak of more than 15 million Aeroméxico records, while the airline reviews it.
Sep 21, 2026 · 2 min
THREATSMexico
Mexico: Proofpoint Detects Mass Email Campaigns
Proofpoint saw large-scale email campaigns targeting Mexico in July and August 2026.
Sep 19, 2026 · 2 min
THREATSMexico
SafePay Adds laconcepcion.com.mx in Mexico
SafePay has added laconcepcion.com.mx to its victim list. Threat intelligence sources place it in Mexico and link it to a possible health provider.
Sep 17, 2026 · 2 min
THREATSMexico
Yucatán investigates leak of thousands of documents
Local media report a possible cyberattack on the Yucatán government. The case is under investigation and no official statement has been issued.
Sep 15, 2026 · 2 min
THREATSMexico
UASLP data leak exposes student photos
Local reports say allegedly hacked UASLP data was posted publicly, including personal information and photos of students.
Sep 14, 2026 · 2 min
THREATSMexico
San Luis Potosí reports extortion after hack
San Luis Potosí City Hall said 2.9 GB of data and more than 15,000 documents were stolen, then reported an extortion attempt.
Aug 29, 2026 · 4 min
THREATSMexico
ToxicPanda 2.0 Targets 140 Banking Apps
Zimperium found ToxicPanda 2.0, an Android variant expanding to more than 140 banking and crypto apps across 16 countries.
Aug 26, 2026 · 2 min
THREATSMexico
Quaker State Mexico listed by Qilin
Quaker State Mexico appeared in a Qilin-attributed listing, with no independent public confirmation of a breach or data theft.
Aug 22, 2026 · 2 min
THREATSMexico
MECASEM appears in 3AM leak listings
Ransomware.live and Breachsense list mecasem.org as a 3AM victim. GalaxyWarden says there is no public confirmation from the company.
Aug 21, 2026 · 2 min
THREATSMexico
Sears Mexico Appears on Space Bears List
Sears (Grupo Sanborns) was listed as a suspected Space Bears victim on a leak site and in aggregators, with no official confirmation.
Aug 16, 2026 · 2 min
THREATSMexico
Mexico banks warn of unauthorized charges
Banamex, BBVA Mexico, Santander, Banco Azteca and Banorte urged customers to watch for unauthorized charges and account access.
Aug 11, 2026 · 2 min
THREATSMexico
Mexico Ranks Second in LATAM Ransomware Cases
Mexico ranks second in Latin America for ransomware victims, with more than 270 public cases by late July and services among the main targets.
Aug 5, 2026 · 4 min
THREATSMexico
Mexico: 3 health providers appear in ransomware
Sanoviv Medical Institute, Centro Médico Palafox and Depósito Dental Universitario appear in ransomware monitoring records.
Aug 3, 2026 · 2 min
THREATSMexico
Mexico Govt, Monterrey Water Hit by AI Actor
An unknown AI-assisted actor hit Mexican government agencies and a Monterrey water utility. Dragos did not link it to known APTs.
Jul 29, 2026 · 2 min
THREATSMexico
Mexico: AI-Linked Attack Hits Government, Water
Dragos linked an unidentified actor to data theft in Mexico’s government and an intrusion attempt against a municipal water utility.
Jul 29, 2026 · 2 min
THREATSMexico
Sinaloa: Possible Data Leak Reported
Officials in Sinaloa reported a possible leak of medical records, payroll data and bank accounts. No public technical findings are available.
Jul 28, 2026 · 2 min
THREATSMexico
Brazil Tops Public-Sector Ransomware Attacks
Brazil accounts for 51% of public-sector ransomware attacks in Latin America as DragonForce scales extortion with RaaS and stolen data.
Jul 22, 2026 · 2 min
THREATSMexico
LLMs in Cyberespionage and Bank Phishing
Hunt.io found LLM-assisted espionage against governments and finance. In Mexico, a phishing network hit banks with more than 100 domains.
Jul 21, 2026 · 3 min
THREATSMexico
Mexico Fraud Complaints Rise 31.5%
Fraud claims in Mexico hit 5.2 billion pesos in Q1 2026, with banks paying or resolving 2.2 billion pesos for users.
Jul 11, 2026 · 2 min