Mexico's Plan Nacional de Ciberseguridad 2025-2030, adopted seven months ago and still in its expansion phase, faces an early stress test during the FIFA World Cup 2026. The tournament creates elevated cyber risk from ransomware groups, hacktivists, fraud actors, and nation-state actors targeting three Mexican host cities. The government launched the Kukulkán Plan for physical and digital security coordination with the US, Canada, and FIFA. Experts note the national plan lacks concrete measures for OT security, supply chain risk management, SBOMs, and SME protections. Mexico also has no comprehensive cybersecurity law yet, only fragmented regulations and unenacted proposals. Latin America broadly saw a 13% year-over-year increase in weekly cyberattacks, reaching nearly 3,150 per organization per week in May.
