Cyber Incident Victim: Poder Judicial del Estado de Nuevo León
Date:
Jan 2023
Location:
Mexico
Summary
The Poder Judicial de Nuevo León experienced a hacking attempt targeting its website, prompting cybersecurity systems to detect a virus intrusion. The institution preemptively activated its IT security protocol, taking all internal and external systems offline—including the Virtual Tribunal—to isolate the threat and safeguard equipment and data. Over 70 terabytes of stored information and more than 3,500 computers underwent disinfection processes. Officials confirmed no data breach occurred, asserting information remained intact without unauthorized extraction, deletion, or access. Systems were projected to resume within 72 hours, during which judicial deadlines were suspended while jurisdictional activities continued unaffected.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 4 motives | 5 techniques |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On January 14, 2023, the website and digital systems of the Judicial Branch of the State of Nuevo León (Poder Judicial del Estado de Nuevo León) became inaccessible following the detection of a hacking attempt involving a virus. Cybersecurity platforms monitoring the organization's infrastructure identified the malicious activity, prompting immediate operational shutdowns. The institution issued an official statement confirming the incident was an attempted compromise, not a successful data breach, emphasizing that no information had been extracted, deleted, or improperly accessed by external sources. In response, the Judicial Branch activated its preventive Computer Security Protocol to contain the threat. This protocol required the complete takedown of all internal and external IT systems, including the Virtual Tribunal platform, to isolate the virus and protect hardware and data integrity.
The containment effort involved disinfecting over 70 terabytes of information stored across servers and more than 3,500 computer workstations. While jurisdictional activities continued normally through non-digital means, all judicial deadlines were suspended for up to 72 hours to accommodate system restoration. Officials projected full service resumption within this three-day window but maintained that core operations remained functional through alternative procedures. No data corruption or loss was reported during the incident, with the institution reiterating that its information remained intact and uncompromised throughout the response period. The suspension of online services temporarily disrupted public access to digital platforms but prevented further escalation of the security event.