León municipal cyber‑security response

In early July 2026 the municipal government of León, Guanajuato announced a breach of its Citizen Attention System that disclosed personal data for roughly 250,000 residents and forced the city website offline. The city lodged a criminal complaint, identified the hacker group “cenfecraked,” and began a security overhaul that includes a multi‑million‑peso license for the Checkpoint 2026 platform and accelerated pursuit of ISO 27001 certification.

Officials later framed the incident as part of a broader wave of more than 1.6 million AI‑driven attack attempts on municipal systems. A Check Point Research report released in mid‑July confirmed that AI coding assistants have been used to compromise nine Mexican federal agencies, exposing about 400 million records and demonstrating new techniques such as prompt‑injection payloads. The national findings underscore the threat environment behind León’s breach.

The political fallout intensified. Councilor Guillermo Medina Plascencia (Morena) demanded the resignation of IT director Carlos Alejandro Cárdenas Hernández, citing a 140‑million‑peso budget that did not prevent the intrusion. Mayor Alejandra Gutiérrez Campos (Movimiento Ciudadano) defended the unit, noting recent restructuring and private‑sector‑comparable salaries. Both the cyber‑security response and a three‑fold rise in outdoor‑advertising spending—jumping from roughly 984,000 pesos in 2023 to 2.98 million pesos in the first five months of 2026—have become topics of debate in the local Congress, with opposition legislators calling for audits and greater digital transparency ahead of upcoming elections.

León continues to invest in protective tools and advance its ISO 27001 certification while navigating scrutiny over fiscal priorities and the effectiveness of its public‑sector technology strategy.