Mexico President Claudia Sheinbaum confirmed on Monday that her personal mobile phone and email account were hacked by unknown attackers. The breach was first flagged by Apple, which notified the government about the security compromise, according to statements Sheinbaum made during her morning press conference.
The attack comes as her administration has intensified its offensive against drug cartels amid growing international pressure, including from the United States. The timing raises serious questions about the cybersecurity of Mexico's highest office and the potential for espionage.
How the Hack Was Detected
Sheinbaum said Apple immediately called the Agency for Digital Transformation, a body created this year to unify the government's technological capabilities and which oversees the General Directorate of Cybersecurity. The agency managed the situation from the outset, and according to the president, it "took action very quickly."

The alert from Apple suggests the company's threat detection systems identified suspicious activity targeting the president's devices. Apple has previously notified users of state-sponsored attacks, often without disclosing technical details.
Was Pegasus Spyware Involved?
When high-profile targets are attacked, speculation often turns to Pegasus, the spyware developed by Israel's NSO Group. However, no information has been released about the specific tools used to compromise Sheinbaum's phone and email.
Apple has been actively combating such spyware, with Pegasus in its crosshairs. The company has developed a system called Lockdown Mode that provides extreme protection for users who may be targeted by sophisticated cyberattacks. It remains unclear whether the president's devices were using this feature.
Why This Matters
The hack of a sitting president's personal communications is a serious national security incident. It could expose sensitive government deliberations, diplomatic exchanges, and personal information. The fact that Apple, a private company, detected the breach before Mexican authorities underscores the challenges governments face in securing their own communications.
Mexico has a history of spyware scandals. Previous administrations were accused of using Pegasus to spy on journalists, activists, and political opponents. The current hack could revive concerns about digital surveillance in the country.
What We Know About the Attack
- Targets: President Sheinbaum's personal mobile phone and email account.
- Detection: Apple alerted the Mexican government's Digital Transformation Agency.
- Response: The agency acted quickly, though details of the mitigation are undisclosed.
- Attribution: No group or individual has been identified; the tools used remain unknown.
- Context: The attack occurs during a heightened security offensive against drug cartels.
Comparison of Spyware Capabilities
| Spyware | Developer | Known Targets | Detection Difficulty |
|---|---|---|---|
| Pegasus | NSO Group | Journalists, activists, heads of state | Very high (zero-click exploits) |
| Predator | Cytrox/Intellexa | Politicians, diplomats | High |
| Other commercial spyware | Various | Varies | Moderate to high |
The table above is illustrative; no specific spyware has been confirmed in this incident. The background to this story is set out in OpenAI AI Agents Hacking Crusade Raises Safety Alarms. A related thread runs through Poland Bomb Plot Exposes Russian Spy: The Unknown Agent's Identity. Earlier coverage in Pegasus Spyware: Moroccan Insider Reveals Widespread Hacking shows how the argument developed.
What to Watch Next
Investigators will likely examine the president's devices for forensic evidence. The Mexican government may also seek assistance from Apple or international cybersecurity experts. The incident could prompt a review of security protocols for senior officials. A closer look at the same subject appears in Mayor Shot Dead in Mexico: 14th Murder Under Sheinbaum. Anyone following the wider picture can start with AI Hacking Threats Spark 'Black October' Cybersecurity Alarm. The same theme surfaces in Australia's Outdated Technology Vulnerable to AI Hacking Attacks, which takes a different angle.
Given the political context, suspicion may fall on drug cartels or foreign actors. However, without official attribution, such speculation remains unconfirmed. The government's response and any future disclosures will be closely watched. Context on how this played out before sits in Spain's Guardia Civil Buys Remote Phone Hacking System for 2.5M. A companion piece, Mexico Governor Charged in 43 Student Disappearance Case, approaches the same subject from another angle.
FAQ
What exactly was hacked?
President Claudia Sheinbaum's personal mobile phone and email account were compromised. The attack was detected by Apple, which notified the Mexican government's digital agency.
Did Apple confirm the attack?
Apple alerted the Mexican government about the breach, according to Sheinbaum. The company has not publicly commented on the specifics of this case.
Is Pegasus responsible?
No evidence has been released linking the attack to Pegasus or any other specific spyware. The investigation is ongoing.
How can officials protect their devices?
Officials are advised to use secure communication tools, enable advanced protections like Apple's Lockdown Mode, and regularly update devices. However, sophisticated spyware can still penetrate even hardened systems.