Instituto de Información Estadística y Geográfica del Estado de Jalisco

The Instituto de Información Estadística y Geográfica del Estado de Jalisco (IIEG) is the state agency tasked with producing official statistical and geographic information for Jalisco. It collects data through surveys, censuses, and administrative records to generate indicators on demographics, economy, environment, and social conditions. The institute processes and validates this information to ensure accuracy and comparability over time. IIEG disseminates its products via publications, online databases, and geographic information systems accessible to government entities, researchers, businesses, and the public. Its outputs support policy formulation, program evaluation, and strategic planning within the state government. By providing reliable data, IIEG serves as a foundational resource for academic study and private sector market analysis in Jalisco.

As the official statistical authority, IIEG holds a regulatory mandate to coordinate statistical activities across state departments and to enforce standards for data quality. Its specialization lies in integrating statistical methods with geographic information systems to produce spatially referenced indicators. Within Mexico's National System of Statistical and Geographical Information, IIEG represents the state-level node that contributes to national datasets. The institute reported experiencing over 29 billion cyberattack attempts against its systems in the seven months preceding December 2022. On 2 December 2022, a cyberattack compromised IIEG's servers and simultaneously infected the state Congress with the ransomware strain known as "Play". The ransomware encrypted data on fourteen servers, affecting parliamentary records, procedural documents, and accounting systems, while IIEG's website became inaccessible. Operational continuity was maintained through temporary tools, although the full extent of any data loss or exfiltration remained undetermined. Authorities noted possible connections to cybercriminal groups active in other Latin American countries, including Argentina. The incident underscored systemic vulnerabilities in the institute's cybersecurity defenses and prompted a review of its protective measures. Despite the disruption, IIEG continued to fulfill its mandate by relying on backup processes and alternative communication channels.