Cybersecurity in Guanajuato failed, and the costs are paid by those who take care of us.
The state Secretariat of Security and Peace was the victim of a computer attack. The intruders took sensitive information from personnel: from state police to intelligence elements. It’s not a minor leak—we’re talking about those who risk their lives in the streets.
The cause? A jewel of digital bureaucracy: credentials that did not meet basic security standards. Just like it sounds. Loose controls, open door for anyone with bad intentions.
“The institutional priority is to protect our police officers,” the agency said in a statement.
Nice words, but the reality is different: the data is already out there. Now they promise to strengthen digital policies, update passwords, implement additional controls. Things that should have been ready before the disaster.
Unauthorized access was detected in the early hours of Friday, April 24, 2026. They isolated the server, strengthened authentication. Reactive measures, as always: after the blow, secure the door.
They also announce a complaint to the State Attorney General’s Office and evaluation of responsibilities. We’ll see if they find someone to sack him—meanwhile, the exposed agents are left in vulnerable mode.
The Secretariat swears by transparency and continuous improvement. But when they talk about “protecting” their people, one remembers that the best insurance against hackers is not patches after the theft—they are padlocks put in place beforehand.
