- Mexican cartels, particularly CJNG and Sinaloa, have intensified operations with mass-casualty attacks, drone strikes, IEDs, and heavy weaponry, demonstrating a shift from traditional criminal activity to insurgent-style tactics that challenge state authority.
- Despite arrests, seizures, and military interventions, cartels have adapted by decentralizing, diversifying into other illicit markets (fuel theft, extortion, migrant smuggling), and integrating technology, maintaining resilience rather than collapsing under enforcement pressure.
- Cartels now function as hybrid actors capable of cross-border coercion, strategic targeting of civilians, officials, and infrastructure, and sustained asymmetric campaigns, signaling a new paradigm in transnational criminal threats that blends organized crime, insurgency, and quasi-military capabilities.
A surge of high-casualty attacks and escalating cross-border tensions underscores why Mexico remains a central concern in 2026 threat monitoring. In late January, 10 employees of a Canadian-owned silver and gold mine were abducted in the mountains above Mazatlán, with five bodies later discovered nearby, highlighting the continued use of violent kidnappings in contested zones. The same month, gunmen opened fire on a crowded soccer field in Salamanca, Guanajuato, killing 11 people and wounding 12 in a mass-casualty attack. January alone recorded more than 1,500 cartel-related murders nationwide, including a single weekend with 161 homicides. Cartels—particularly the Jalisco New Generation Cartel (CJNG)—have continued deploying explosive-laden drones, a tactic previously demonstrated in the October 2025 drone strike on a government facility in Tijuana. Reporting also indicates that CJNG authorized attacks on U.S. Customs and Border Protection personnel using a tiered bounty system, encouraging drone strikes and direct gunfire. Simultaneously, cartels have increased their use of heavy weaponry, including .50-caliber rifles, to overwhelm local law enforcement. As of mid-February 2026, the U.S. military has conducted dozens of lethal maritime strikes against suspected trafficking vessels in the Caribbean and Pacific, reportedly killing at least 145 individuals since September 2025—illustrating the widening security spillover.
These developments build on an already transformative 2025. On February 20, 2025, under President Donald Trump, the U.S. Department of State formally designated several major cartels as Foreign Terrorist Organizations (FTOs), including the Sinaloa Cartel, CJNG, Gulf Cartel, Cártel del Noreste (CDN), La Nueva Familia Michoacana, and Carteles Unidos, among others.
The Sinaloa Cartel experienced intense internal fragmentation between the Los Chapitos faction and the faction aligned with Ismael “El Mayo” Zambada, producing sustained violence across Sinaloa and neighboring states. In April 2025, a Los Chapitos–linked cell attacked a drug rehabilitation center in Culiacán, killing nine individuals. Subsequent clashes resulted in additional fatalities, with bodies displayed publicly to intimidate rivals and signal territorial control. Rather than collapse under enforcement pressure, the organization fractured into competing nodes, amplifying instability.
CJNG pursued a more expansionist trajectory. Across Michoacán, Jalisco, and Guanajuato, the cartel orchestrated coordinated highway blockades, vehicle burnings, and multi-municipality shutdowns designed to paralyze transportation corridors. In May 2025, CJNG escalated to insurgent-style IED warfare, destroying an armored vehicle and killing eight Mexican security personnel along the Michoacán–Jalisco corridor. Drone warfare also became normalized. The October 2025 drone attack on a government compound in Tijuana marked one of the clearest examples of unmanned aerial systems used offensively against state facilities in a major urban border zone. By late 2025, drones were integrated into routine cartel operations for surveillance, targeting, and explosive delivery, signaling a technological arms race between criminal organizations and security forces.
Other groups demonstrated their capacity to destabilize strategic border cities. Following the February 2025 arrest of CDN leader Ricardo González Sauceda (“El Ricky”) in Nuevo Laredo, sustained gunfights and highway blockades disrupted urban life and temporarily shut down key infrastructure, underscoring how leadership arrests can trigger immediate retaliatory violence.
GTTAC recorded attacks carried out by designated cartels from February 20 through June 30. According to GTTAC, these cartels perpetrated 52 attacks in the last 10 days of February, 262 attacks in March, 273 in April, 271 in May, and 324 in June, demonstrating a sharp escalation in operational tempo during the early months of the year. These attacks killed 1,448 individuals and wounded 438, confirming once again the cartels’ reliance on highly lethal tactics. The most active group during this period was the Jalisco New Generation Cartel (CJNG), responsible for 756 attacks, followed by the Sinaloa Cartel with 195, the Cartel del Noreste with 116, Carteles Unidos with 56, the Gulf Cartel with 29, and La Nueva Familia Michoacana with 26. Firearms were used in 950 attacks, followed by 48 involving incendiary devices, 48 involving melee weapons (blunt or bladed objects), 21 using explosives, 11 involving improvised explosive devices (IEDs), and 4 involving unmanned aerial vehicles (UAVs). The attacks targeted 756 civilians, 119 government employees, 117 professionals, 54 rival group members, and 17 military personnel, suggesting deliberate and strategic target selection. In terms of facilities, 863 attacks targeted infrastructure, 106 commercial sites, 48 government facilities, 16 cultural sites, and 12 military facilities. Vehicles were used to access attack locations in 3,896 incidents, while mail or postage methods were used in two cases.
Despite record-level drug seizures in both the United States and Mexico—including unprecedented cocaine interdictions and millions of fentanyl pills confiscated—evidence suggests these seizures reflect high production volumes intersecting with intensified enforcement rather than durable contraction. Under pressure, cartels diversified into fuel theft (huachicol), migrant smuggling, extortion, and other illicit markets to stabilize revenues. They hardened logistics, intensified counter-surveillance, expanded corruption networks, and increasingly adopted asymmetric tactics—drones, IEDs, targeted assassinations, and heavy-caliber weaponry—to raise the costs of state intervention.
Collectively, the trajectory from 2025 into 2026 indicates not the dismantling of cartel power but its adaptation. Mexico’s major criminal organizations now operate as decentralized, technologically adaptive hybrid actors capable of mass-casualty attacks, cross-border intimidation, and sustained coercive violence under unprecedented enforcement pressure.
