Infrastructure, Data, Governments: The New Cyber Victims

While cyberattacks were once considered to be limited to traditional IT systems, new areas of attack are emerging, capable of affecting daily life as well as the integrity of citizens. Cyberthreats have become a central element in international conflicts, affecting not only conventional IT systems, but also critical infrastructures, massive databases, and even democratic processes, underlining the need to strengthen digital defenses globally.

Most common cyberattacks include ransomware, malware, in-file attacks, and phishing, says Checkpoint. Phishing, in particular, is especially considered the most widespread threat nationwide, according to INFOEM. However, multiple media have pointed out that both constant technological evolution and international geopolitical tensions are leading to an increase in attacks on critical infrastructures. This increase is positioning this type of attacks as one of the most significant and emerging risks, given their potential to affect essential services such as water supply, electricity, or health services.

For example, in May 2024 the United States Environmental Protection Agency (EPA) issued an alert on the increase of cyberattacks directed against drinking water systems in the country, 70% of which did not comply with the necessary security standards. In Mexico, during the same month, Hillstone Networks reported several challenges affecting the cybersecurity of water and power systems, including system complexity, high demand, and stringent government regulations. These systems also must be operational 24/7, requiring the implementation of robust and continuous security measures.

Healthcare services have also become increasingly attractive targets for cyberattackers. In mid-June 2024, UK pathology and diagnostic services provider Synnovis was hit by a ransomware attack that affected the entire London healthcare system, crippling essential services, affecting thousands of patients and healthcare workers, as MBN previously reported.

"The ripple effect of this extremely serious incident is being felt across a number of hospitals, community, and mental health services in our region," read a message shared by the BBC.

In Mexico, 50% of healthcare centers nationwide face significant data security problems, according to the study Code Digital: Will Healthcare Thrive or Survive, conducted by SOTI. The report highlights that half of healthcare centers had suffered security incidents by July 2024, including data breaches from external sources, ransomware attacks, and unintentional leaks by internal staff.

"The impact of technological stagnation on the healthcare sector is significant," reads the SOTI report. "Without the adoption of advanced technologies, there is a tangible risk of delays in critical care, mismanagement of patient data, and difficulties in communication between healthcare providers."

User Data: An Increasingly Appealing Target

A year ago, the world witnessed one of the largest database theft in history, representing the theft of 12 terabytes with nearly 26 billion pieces of data, which included private credentials, passwords, emails, phone numbers, bank details and other sensitive data, says Bob Dyachenko, Co-Founder and Cybersecurity Consultant, Security Discovery. 

"The database theft was caused by a vulnerability in MOVEit file transfer software, which is used by many companies and governments to share sensitive information," writes Procesia. "A cybercriminal group called Clop exploited this security breach to access the database of more than 100 organizations, including Shell, British Airways, the US Department of Energy, and the Ontario government."

In Mexico, multiple companies suffered data theft during 2024, but a notable case involved the theft of Virgin Mobile’s data on 14 million users in Chile, Colombia, and Mexico. The compromised data, as reported by R3D, included subscriber identification numbers, and personal SIM card information, as well as names, addresses, phone numbers, and bank account details.

ClickBalance, a Mexican provider of enterprise resource planning (ERP) software, also suffered an attack, which exposed 769 million records worldwide. The leaked data included bank accounts, tax identification numbers, geographic locations, and 381,2245 email addresses.

"This type of exposed information can facilitate unauthorized access to critical systems and sensitive data, posing serious risks to the security of IT infrastructure and affected users," writes Jeremiah Fowler, Cybersecurity researcher at vpnMentor and Co-Founder of Security Discovery, in an article for Website Planet.

Cyberattackers have focused on the theft of personal data because of its high value on the illicit market and its utility for multiple malicious purposes. Personal information can be sold on the dark web, used for financial fraud, or highly personalized phishing campaigns. In addition, according to Tus Datos, personal data allows attackers to access wider corporate networks, compromise critical systems, and execute more sophisticated attacks, such as espionage or extortion, maximizing the impact and economic benefits of their operations.

Government Integrity Risks

Governments are also increasingly at risk of a cyberattack. For example, Donald Trump's campaign was hacked in an attack attributed to Iran, which included the leak of confidential documents related to vice presidential nominee James David Vance and other internal campaign issues. According to Microsoft, the attack was part of a broader Iranian effort to influence the 2024 election. Chris Krebs, former Director, Cybersecurity and Infraestrcuture Security Agency (CISA), warns that these attacks seek to sow chaos and erode confidence in the democratic process.

On Dec. 31, 2024, the US Treasury Department reported a Chinese-sponsored cyberattack, where state actors accessed unclassified documents by exploiting keys on workstations. Although the full extent of the damage is still unknown, the incident was labeled as a "major security issue," reports Swiss Info.

In Mexico, cyberattacks against government agencies are projected to increase by 260% by 2025, driven by obsolete technological systems and budget cuts resulting from austerity policies. Victor Ruiz, Founder, SILIKN, reports that 70% of agencies operate with critical vulnerabilities, which allowed 65% of attacks in 2024 to compromise key information. This scenario could worsen in 2025, putting government security and efficiency at risk.

Cyberattacks targeting governments often have multiple motivations. According to Checkpoint, they include espionage, political activism, and the disruption of key state functions.

What Can Be Expected?

In 2025, cybercrime is expected to continue to consolidate as one of the main global threats, reaching alarming levels of economic and social impact. During 2024, El País reported that cybercrime generated losses of US$10.4 trillion globally, doubling the previous year's figures and ranking as the world's third largest "economy," behind only the United States and China. With 20% of global crime occurring on the Internet, 2025 is expected to see a sustained increase in cybercrime, especially frauds and scams.

According to estimates by Zscaler TheatLabz 2024 Ransomware Report, the global cost of cybercrime could exceed US$15 trillion by the end of this year, largely driven by technological advances, especially AI tools.

In response to these threats, the United Nations General Assembly adopted the Convention Against Cybercrime, an international treaty that seeks to strengthen global cooperation to combat digital crimes. This framework will allow states to exchange evidence, protect victims, and establish preventive measures, while ensuring respect for human rights in the digital realm, as previously reported by MBN. The convention is expected to be ratified by at least 40 countries.

What About Mexico?

Mexico faces both challenges and opportunities in cybersecurity. The absence of robust cybersecurity legislation places the country among the most vulnerable to growing digital attacks. According to recent data from ConsejoSI!, damages from cyberattacks could grow by 50 times in the next year, underscoring the urgency of adopting proactive and effective cybersecurity strategies.

Mexico has the opportunity to raise its standards and align itself with international best practices, says Javier Diaz Evans, General Director, A3Sec Group. "This effort implies not only the adoption of advanced technologies, but also investment in training specialized personnel and in models that integrate prevention, detection, and agile response to incidents," Diaz tells MBN.