Evaluating Mexico’s New Cybersecurity Plan

Mexico published a 2025–2030 National Cybersecurity Plan to strengthen coordination and resilience against prominent threats — notably ransomware, financial malware and fraud, data breaches, hacktivism, organized crime money laundering, and state-sponsored espionage. The report details widespread ransomware activity (Insikt Group documented 223 incidents involving 64 groups), prevalence of infostealers and stolen payment cards, examples of APT targeting of research institutions, and highlights the elevated risk to critical services ahead of the 2026 FIFA World Cup, concluding with mitigation recommendations such as adoption of standards, threat intelligence, scenario exercises, and public cyber hygiene campaigns.