The Universidad Nacional Autónoma de México (UNAM) saw its online entrance exams breached by hackers despite paying for 20 security locks [1].
The failure of these security measures undermines the integrity of one of Mexico's most competitive academic admissions processes. This breach has left thousands of students in uncertainty regarding the fairness and validity of their test results.
UNAM hired the security provider Territorium Life to implement the "candados," or security locks, to prevent cheating and unauthorized access during the 2026 admission period [1]. Despite these protections, hackers managed to bypass the system. Some social-media accounts allegedly sold exam answers for as much as 1,500 pesos [2].
In response to the security failure, UNAM filed a criminal complaint on July 3, 2026 [3]. The university has since cancelled the exams for more than 1,000 applicants suspected of fraud [4].
Territorium Life has requested a meeting with UNAM to discuss the breach. The university is now facing intense scrutiny from students who question whether the remaining results can be trusted. The incident highlights a growing tension between the shift toward digital testing and the evolving capabilities of cybercriminals to circumvent specialized security software.
While the university sought to automate security, the breach suggests that technical locks alone were insufficient to stop organized fraud. The cancellation of more than 1,000 exams [4] serves as a drastic measure to preserve the institution's academic standards, though it leaves a significant number of candidates in limbo.
“UNAM paid for 20 security locks, but the exams were breached by hackers.”
This breach exposes the vulnerability of high-stakes digital assessments to organized cybercrime. When a premier institution like UNAM fails to secure its exams despite targeted investment in security software, it suggests that traditional 'lock-down' technology may be inadequate against modern hacking methods. The resulting mass cancellations and criminal complaints indicate a shift toward legal retaliation and systemic resets rather than relying solely on technical preventions.
