Ransomware threat profile: Mexico
Mexico ranks #12 worldwide for ransomware disclosures, with 290 victims in this database — 1.2% of the global total. The groups listing the most organisations here are Qilin, Thegentlemen and Lockbit5.
The most frequently listed industries in Mexico are Manufacturing, Business Services, Technology. Healthcare is especially exposed: an outage at a hospital or clinic can put patients at risk, which raises the pressure to pay quickly.
The volume reflects Mexico's integration into the global economy and the reach of ransomware operations that target organisations of every size. Organisations here should weigh the active groups documented on this page when prioritising detection rules and incident-response planning.