# Cybersecurity incidents in Mérida

> Developing situation record from CLSTR: https://clstr.news/situations/cybersecurity-incidents-in-mrida
> Updated: 2026-10-29T21:08:24.000Z. Sources: 3. Developments: 2.

In mid October 2026, officials in Mérida, Mexico, reported that the City Council was facing daily cyberattack attempts. These threats included identity theft, credential theft, and impersonation. To counter these risks, the municipality implemented 24/7 monitoring, mandatory password changes, and two-factor authentication. The city also joined the Alianza México Ciberseguro to bolster its digital infrastructure.

By late October 2026, a separate incident involving a cyberattack on the Extremadura Health Service (SES) led to a judicial investigation in Mérida, Spain. The breach compromised over 334,000 health records, affecting 18,416 patients. National Police detained a suspect in Mérida who allegedly used an automated process via an anonymous virtual server to access the CSOnline portal. Authorities seized high-performance computer systems during a raid, and investigators believe the suspect intended to sell the stolen medical data on cybercrime forums.

On October 29, 2026, details emerged regarding the scope of the Spanish breach. The exposed data included diagnoses, treatments, and medical histories, affecting high profile individuals such as María Guardiola, the President of the Junta de Extremadura. The investigation, led by the Court of Instance and Instruction of Mérida, is examining charges related to the discovery and revelation of secrets, as well as unlawful access to computer systems. Authorities confirmed that the seizure of stolen databases during a judicial search prevented the intended sale of the information.

## Timeline

### 2026-10-29: Spanish police arrest suspect in Extremadura health service cyberattack

A suspect has been arrested in Mérida for a cyberattack on the Extremadura Health Service that exposed the medical records of over 18,000 patients, including the regional president.

3 sources. https://clstr.news/cluster/mrida-court-investigates-cyberattack-on-extremadura-health-service

### 2026-10-14: Mérida City Council faces daily cyberattack attempts

Mérida officials report facing daily cyberattacks, including identity theft and credential theft, prompting 24/7 monitoring and the city's integration into the Alianza México Ciberseguro.

3 sources. https://clstr.news/cluster/mrida-city-council-faces-daily-cyberattack-attempts

---
Cite as: Cybersecurity incidents in Mérida. CLSTR, https://clstr.news/situations/cybersecurity-incidents-in-mrida
