Nuevo Leon is the Target of 24% of Cyberattacks in Mexico

Nuevo Leon is the target of 24% of cyberattacks in Mexico, prompting the launch of the “Pymes Ciberseguras” platform. This initiative aims to address a sharp increase in threats and the critical deficit of 77,000 specialists.

Nuevo Leon concentrates 24% of all cyberattacks in the country following a 78% surge in digital threats over the previous year, reports C5. In response, state authorities and industrial clusters launched the Pymes Ciberseguras (Cybersecure Small and Medium Businesses) platform, which aims to provide a technological shield for small and medium-sized enterprises against sophisticated ransomware.

The concentration of attacks correlates directly with the industrial and technological density of the region, making it a high-value target for criminal organizations. "That is the paradox of our technological and digital boom, because it also attracts crime, which today uses AI to sophisticate attacks such as ransomware and phishing," says Jorge Ron, Director General, C5. 

The vulnerability of the industrial ecosystem in Nuevo Leon stems from a significant disparity between connectivity and cybersecurity implementation. While 98% of the population in Nuevo Leon has internet access, only 3% of companies utilize advanced technology to optimize their internal processes. This digital gap creates an expansive attack surface for cybercriminals who exploit the lack of defensive protocols in smaller organizations.

Historically, SMEs have viewed cybersecurity as a prohibitive expense rather than a strategic investment. Carlos Serna, Deputy Minister of Economic Development, says the project required a year of development to create an accessible strategy for businesses with limited resources. 

These companies represent over 90% of the corporations in Mexico, yet they often lack dedicated technical departments, leaving the business owner to manage payroll, administration, and digital security simultaneously.

Addressing the National Cybersecurity Talent Deficit

The Pymes Ciberseguras platform functions as a preventive diagnostic tool and the first of its kind at a state level. The system offers a free self-diagnosis to evaluate the readiness of a company against digital threats, focusing on identifying specific vulnerabilities before they are exploited. Gustavo Garcia, President, Digital Technologies Innovation Cluster (CSOFTMTY), says the initiative is a response to the rapid advancement of automation, cloud computing, and analytical tools that have transformed modern business operations.

However, the effectiveness of these technological tools is limited by a severe shortage of qualified personnel. According to the study "Radiography of Digital Talent: Specialization, Gaps, and Opportunities in Cybersecurity," conducted by the cybersecurity company IQSEC and the consultancy Select, Mexico faces a deficit of 77,000 experts. While the national market requires 83,000 specialists, only 6,000 professionals are active in the field.

The shortage is not a matter of volume, but of specific technical qualifications. Although the educational system produces 278,000 information technology and communication (ITC) professionals annually, the specialization rate remains low. 

Cesar Sanabria, CISO, IQSEC, says that only 1.4% of ITC students are enrolled in specialized cybersecurity programs. In 2025, the country graduated only 933 specialists, which covers a mere 1.2% of the total market demand.

Several structural factors contribute to this talent crisis:

• Language Proficiency: Only 35% of ITC professionals in Mexico possess an advanced level of English (C1 or C2). This proficiency is essential for obtaining international certifications, reading technical documentation, and utilizing global security tools.
• Workplace Requirements: While remote work dominates the broader ITC sector, 41% of cybersecurity positions require an in-person presence due to the sensitive nature of managing critical infrastructure.
• Gender Disparity: Women represent only 23% of the enrollment in these technical areas, limiting the pool of potential talent in an already exhausted market.

The financial impact of this talent gap is significant for the B2B sector. The average monthly salary for a specialized cybersecurity professional is about MX$51,386 (around US$2,950). For many MSMEs, these costs are unsustainable, leading to the "theft" of talent between larger corporations and increasing the risk of burnout among existing staff.

To mitigate these challenges, IQSEC introduced the Talent Seedbeds model. This program aims to transform generalist graduates into functional specialists within six months through intensive technical training. Israel Quiroz, Founder, IQSEC, says the responsibility of the industry has shifted from merely hiring talent to actively developing it through real-world operational scenarios.

The integration of AI is also redefining professional roles within the sector. While AI facilitates the automation of ransomware and phishing, it forces human analysts to migrate toward roles focused on data governance and security architecture. 

Experts suggest that the competitiveness of organizations will no longer depend on their ability to find senior talent in a depleted market, but on their willingness to train their own human capital.

The Pymes Ciberseguras platform aims to foster a culture of digital prevention and generate reliable local statistics to guide future public policy. Betsabe Rocha, Nuevo Leon’s Minister of Economy, says that strengthening the protection of SMEs is a priority for the state. By providing a clear starting point through the web portal, the government expects to increase the digital resilience of the region and protect the economic interests of the 90% of companies that form the backbone of the economy in Nuevo Leon.

As AI continues to lower the barrier for cybercriminals to launch sophisticated attacks, the collaboration between universities, chambers of commerce, and government authorities becomes essential. The objective is to transition from a reactive state to a proactive digital defense model that ensures Nuevo Leon remains an attractive destination for international investment and technological innovation.