León municipality overhauls cyber‑security after breach of 250,000 records

The municipal government of León, Guanajuato announced a comprehensive cyber‑security program following a major intrusion of its Citizen Attention System (SAC). The breach exposed personal data—names, CURP, addresses, phone numbers, emails and precise geolocation—for roughly 250,000 residents and caused the municipal website to go offline for several days.

León filed a criminal complaint (case 76519) with the state prosecutor, reported more than 1.6 million attempted attacks in 2026, and accelerated adoption of the ISO 27001 information‑security standard. Governor Libia García called for substantial investment in municipal digital defenses, while authorities trace the attack to a hacker group identified as “cenfecraked,” which allegedly sold the 200‑MB data file on a criminal forum.

The incident reflects a broader surge in cyber‑crime in Guanajuato, with over 1,400 reports of online fraud, identity theft and extortion recorded in the first five months of the year.