Bancomext appears in reporting on 2018 Mexican banking and wire-transfer payment-system incidents, where attackers were discussed in the context of compromise paths involving concentrators, servers, developers, contractors, and internal banking networks. The incident was later included in U.S. Justice Department and UN-linked reporting on DPRK/RGB-associated financial cyber operations spanning SWIFT-enabled bank theft attempts, ATM cash-outs, cryptocurrency activity, and laundering of cyber-enabled proceeds.