Mexico’s Cybersecurity Plan 2025-2030: Turning Ambition Into Defense

## Executive summary This Insikt Group report assesses Mexico's evolving cyber threat landscape and outlines the government's 2025–2030 National Cybersecurity Plan; it highlights ransomware as the dominant threat (223 incidents from 2020–Apr 2026), active state-sponsored espionage (multiple China- and Asia-linked groups), widespread financial malware and infostealer activity, large-scale data exposures (including ~780,000 payment cards), emerging hacktivist groups, and the overlap between organized crime and cyber operations, and recommends stronger governance, threat intelligence usage, international frameworks, exercises, and public cyber hygiene efforts.