Mexico's National Insurance and Surety Commission (CNSF) reported an information security incident that occurred on 30 January and said it activated its security and incident response protocols, along with contingency and business continuity plans. As an operational measure, it will extend the validity of existing intermediary credentials (cédulas) until 28 February while continuing to process the review, authorisation and issuance of new cédulas. The CNSF indicated that the exposed information relates to intermediary cédulas and is mostly public in nature. It also said it will pursue the corresponding legal actions before the competent authorities in relation to conduct that may constitute offences of this type.