GOBIERNO DE GUANAJUATO

GOBIERNO DE GUANAJUATO was compromised in a ransomware attack attributed to kazu in November 2025. The organization, operating in an undisclosed sector in Unknown, was added to the group's data leak site as part of an extortion campaign.

kazu operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

The official platform of the Secretaría de Gobierno de Guanajuato, used to manage government personnel, service centers, and strategic planning documents across the state. The system supports internal coordination between offices and tracks public service delivery metrics.