Mexico's Cybersecurity Plan Addresses Rising Ransomware Threats

• •Mexico's National Cybersecurity Plan aims to enhance defenses against rising ransomware threats.
• •223 ransomware incidents were reported in Mexico from 2020 to 2026, affecting multiple sectors.
• •The plan includes a six-phase roadmap for improving cybersecurity capabilities by 2030.

Mexico's National Cybersecurity Plan, introduced in December 2025, aims to tackle increasing cyber threats, particularly ransomware, which has seen 223 incidents involving 64 groups from 2020 to 2026. The plan is a response to the urgent need for improved cyber defenses following the FIFA World Cup 2026, which stressed the country's digital infrastructure. Mexico is ranked as a 'Tier 2' nation in the ITU's 2024 Global Cybersecurity Index, indicating a need for enhanced institutional capacity and international cooperation. The plan outlines a six-phase roadmap to build cybersecurity capabilities by 2030, with a focus on sectors like government, manufacturing, and IT. Key ransomware groups targeting Mexico include LockBit and Qilin, with significant impacts on critical infrastructure. The government, led by President Claudia Sheinbaum, is committed to full implementation, supported by a congressional majority. However, experts express skepticism about the government's ability to establish necessary institutions effectively.