Cartels, Cameras, and Commercial Data: Nonstate Actors and Ubiquitous Technical Surveillance

Center for Strategic and International Studies | Justin Sherman

A September 2026 Department of Justice inspector general audit revealed that sophisticated transnational organised crime groups are actively exploiting ubiquitous technical surveillance (UTS) to compromise law enforcement operations and target human sources. In one instance detailed in a prior June 2025 audit, a Mexican cartel hired a hacker to breach an FBI assistant legal attaché's mobile phone in Mexico City, matching geolocation logs with municipal camera networks to identify and assassinate cooperators.

Digital exposure creates immediate operational risk. UTS spans five distinct vectors: visual and physical, electronic signals, financial, travel, and online tracking. While major powers like China, Russia, and Iran dominate this domain, non-state criminal entities are rapidly lowering technical barriers to entry. By combining commercial data brokers, advertising technology, automated license plate readers, and artificial intelligence, cartels achieve targeted intelligence fusion once reserved for state security services. Addressing these vulnerabilities requires designated UTS mitigation leads, advanced anti-surveillance training, and privacy-enhancing technologies across United States security agencies.

Comment

The compromise of the FBI assistant legal attaché in Mexico City illustrates a fundamental shift in counterintelligence dynamics where non-state entities achieve tactical signal parity. Commercial device telemetry and municipal CCTV feeds provide transnational criminal syndicates with raw intelligence streams previously restricted to sovereign state apparatuses. Rather than penetrating encrypted federal communications, adversaries exploit peripheral metadata and commercial data brokers to map physical movements. This reliance on commercial aggregation transforms routine administrative connectivity into a persistent operational vulnerability.

This evolution mirrors the 1994 Drug Enforcement Administration discovery in Colombia, where the Cali Cartel deployed an IBM supercomputer to cross-reference telephone logs against government flight manifests. Modern adtech architecture scales that historical pattern, replacing bespoke hardware with commercially accessible data feeds. Consequently, non-state threat vectors now replicate state-level intelligence capabilities across the Mexico City metropolitan corridor without maintaining dedicated state infrastructure.

Strategic Question for Discussion

When transnational syndicates synthesize open commercial telemetry with localized cyber intrusions, as seen in the targeting of the FBI attaché in Mexico City, does counterintelligence failure stem more from operational tradecraft flaws or from unregulated commercial data ecosystems?

The available evidence points toward systemic operational tradecraft vulnerabilities rather than purely regulatory deficits. While commercial data broker activity expands the available attack surface, criminal syndicates in Mexico City successfully weaponized targeted mobile breaches and physical correlation rather than raw data purchases alone. This trajectory indicates that hardened operational security and continuous signal auditing will remain the primary defense against non-state intelligence collection.

Share your assessment in the comments below.

Read the original article