SAT Rules Out Cyberattack: Digital Risk Becomes a Top-Tier Economic Issue

The tax authority said its systems show no unauthorized access, at a time when cybersecurity is already affecting costs, trust, and tax compliance.

The Tax Administration Service (SAT) denied it had been the victim of a cyberattack following media reports pointing to an alleged massive leak of records. In an official statement, the agency said that after reviewing logs and the operation of its platforms, it found no “unauthorized access or anomalous behavior” in its systems.

The statement comes after information was published about a supposed theft of databases that would include taxpayer records and files from various public entities. In response to that kind of reporting, SAT said it activates monitoring, containment, and mitigation protocols to protect taxpayers’ information, and said it maintains ongoing surveillance amid the growth of threats amplified by generative AI tools.

According to SAT, its cybersecurity strategy aligns with Federal Government guidelines and with frameworks based on international standards—such as the ISO/IEC 27000 family, as well as ISO 22301 and ISO 31000—aimed at strengthening risk management, operational continuity, and early response to cybersecurity incidents.

Beyond the specific episode, the issue has economic implications: the digitization of tax compliance, e-invoicing, and interconnected procedures have increased Mexico’s revenue-collection efficiency, but they also raise the cost of protecting critical infrastructure and sensitive data. In an environment of global slowdown and pressure on public spending, cybersecurity has become a public-policy component that affects confidence, investment, and administrative productivity.

For companies—especially SMEs—a real incident or even the expectation of disruptions on official platforms can mean delays in refunds, clarifications, filings, and e-invoicing validation (timbrado), with effects on cash flow, compliance, and financing costs. In the formal sector, where tax planning and treasury management depend on strict calendars, continuity of SAT systems is an operational input comparable to other critical services.

Cybersecurity and Public Finances: Operational Continuity as a Macro Variable

Mexico’s tax collection increasingly relies on digital processes: digital tax receipts (CFDIs), data cross-checks, the tax mailbox (buzón tributario), and online payments. That architecture has strengthened enforcement capacity and reduced room for evasion, but it also makes “technological resilience” a variable with direct impact on public finances. A prolonged disruption—whether due to an attack, a failure, or overload—can create short-term bottlenecks in revenue collection and in the taxpayer-authority relationship, while also driving up administrative and litigation costs.

At the same time, the rise of AI-assisted attacks and the cybercrime economy has increased the value of personal and tax information in illegal markets. For the Mexican economy, that translates into greater investment needs in information security across both the public and private sectors, and a broader debate on data governance, protection standards, technology outsourcing, and workforce training.

In the short term, the institutional response to incident reports also shapes perceptions of certainty. While denying an attack does not rule out attempts or latent risks, SAT’s message seeks to contain uncertainty around the day-to-day operation of tax services. Over the medium term, expectations of further digitization—and more information-sharing—suggest the tax authority will face pressure to strengthen internal audits, traceability, penetration testing, and continuity plans, with budgetary and management implications.

For taxpayers, specialists recommend sticking to good practices: using strong passwords, regularly checking the tax mailbox, monitoring for unusual activity, and being cautious about social engineering. While these are individual measures, adopting them reduces systemic vulnerabilities and helps prevent peripheral fraud from being mistaken for direct intrusions into government platforms.

In sum, SAT rejects that there is evidence of an intrusion into its systems, but the episode underscores that cybersecurity is no longer just a technical issue: it is a prerequisite for revenue-collection continuity, trust in digital procedures, and the day-to-day functioning of Mexico’s formal economy.