{
	"id": "6a2530a4-86c2-4280-9c7a-13c9ede49aa7",
	"created_at": "2026-04-06T15:53:18.316177Z",
	"updated_at": "2026-04-10T03:24:18.689995Z",
	"deleted_at": null,
	"sha1_hash": "491ee26d58e669d2c93dcf92b632d97c0f3e5d1c",
	"title": "Analysis-Mexico data hack exposes government cybersecurity vulnerability",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 33700,
	"plain_text": "Analysis-Mexico data hack exposes government cybersecurity\r\nvulnerability\r\nBy Diego Oré\r\nPublished: 2022-10-01 · Archived: 2026-04-06 15:26:19 UTC\r\nDiego Oré\r\nOctober 1, 2022 2 min read\r\nBy Diego Oré\r\nMEXICO CITY - A major hack into classified government information in Mexico, including thousands of emails\r\nfrom the armed forces, exposed the country's vulnerability to cyberattacks due to under-investment and poor\r\ntechnological preparedness, experts said on Friday.\r\nPresident Andres Manuel Lopez Obrador confirmed on Friday the Defense Ministry had suffered a hack that\r\nrevealed details about his heart condition - a form of angina - as well as information on criminal figures,\r\ntranscripts of communications, and the monitoring of the U.S. ambassador to Mexico.\r\nA group called \"Guacamaya\" - or \"macaw\" in Spanish - claimed responsibility for the hack and said on its website\r\nit had accessed six terabytes of data.\r\nThe size of the hack suggested prior planning, said Francisco Solano, an executive at IT services and consulting\r\nfirm Logicalis.\r\n\"This did not happen by chance,\" he said.\r\nAccording to Solano and other analysts consulted by Reuters, the vulnerability exploited by the hackers stemmed\r\nfrom a weakness in a Microsoft server detected last year, known as ProxyShell.\r\nAlthough solutions to fix the problem were available, the government needed to carry out updates to implement\r\nthem.\r\n\"You have the antidote, but nobody to apply it,\" Solano said, adding that there appeared to be a lack of resources\r\nto resolve the issue.\r\nMicrosoft did not immediately respond to an emailed request for comment.\r\nOn Friday, at his daily news conference, Lopez Obrador said that hackers had exploited a change in the military's\r\nIT systems, without giving further details.\r\nThe armed forces did not respond to a request for comment.\r\nhttps://finance.yahoo.com/news/analysis-mexico-data-hack-exposes-003101651.html\r\nPage 1 of 2\n\nGovernments worldwide have been increasingly targeted by aggressive cyber crime in recent years and have been\r\nforced to increase investment and focus on cybersecurity.\r\nIn Latin America, Mexico ranks as the country most targeted by cyberattacks in public and private sectors\r\ncombined, several studies have shown.\r\nMexican oil company Pemex, National Lottery and National Transparency Platform have been hit by cyberattacks\r\nin recent years.\r\nAlthough Mexico's government has steadily devoted more resources to cybersecurity, the investment is not\r\nenough compared to what is needed to ward off attacks, experts said.\r\nHackers would have needed up to three days to copy the information, said Adolfo Grego, a forensic specialist, also\r\nraising questions over why the government did not act sooner.\r\n(Reporting by Diego Oré; Editing by Muralikumar Anantharaman)\r\nSource: https://finance.yahoo.com/news/analysis-mexico-data-hack-exposes-003101651.html\r\nhttps://finance.yahoo.com/news/analysis-mexico-data-hack-exposes-003101651.html\r\nPage 2 of 2",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"Malpedia",
		"MISPGALAXY"
	],
	"references": [
		"https://finance.yahoo.com/news/analysis-mexico-data-hack-exposes-003101651.html"
	],
	"report_names": [
		"analysis-mexico-data-hack-exposes-003101651.html"
	],
	"threat_actors": [
		{
			"id": "ae7c5e09-a79b-4dae-8ed3-f288b8d99810",
			"created_at": "2023-11-08T02:00:07.110982Z",
			"updated_at": "2026-04-10T02:00:03.416181Z",
			"deleted_at": null,
			"main_name": "Guacamaya",
			"aliases": [],
			"source_name": "MISPGALAXY:Guacamaya",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		}
	],
	"ts_created_at": 1775490798,
	"ts_updated_at": 1775791458,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/491ee26d58e669d2c93dcf92b632d97c0f3e5d1c.pdf",
		"text": "https://archive.orkl.eu/491ee26d58e669d2c93dcf92b632d97c0f3e5d1c.txt",
		"img": "https://archive.orkl.eu/491ee26d58e669d2c93dcf92b632d97c0f3e5d1c.jpg"
	}
}