NarcoWatch - 25 February 2026
Mexican security forces killed Cartel Jalisco Nueva Generación (CJNG) leader Nemesio Oseguera Cervantes, "El Mencho," in a targeted military operation in Tapalpa, Jalisco, on February 22 [1, 3, 15]. The killing triggered an immediate and widespread retaliatory offensive by the CJNG, which established over 250 roadblocks and conducted attacks across 20 states, resulting in the deaths of at least 26 security personnel [4, 15]. Amid the fallout, law enforcement operations continued against other DTOs, including the dismantling of a Sinaloa Cartel cell on the southern border with foreign members and the arrest of key financial operators for La Unión Tepito in Morelos [8, 9, 10, 11].
Significant Incidents and Articles of Interest
Killing of 'El Mencho' and Widespread CJNG Retaliation – Multi-State: On February 22, a special forces unit of the Mexican Army located and killed Nemesio Oseguera Cervantes, "El Mencho," the founder and leader of the CJNG, in Tapalpa, Jalisco [1, 3]. The operation, supported by U.S. intelligence, tracked El Mencho after a visit from one of his "sentimental partners" [15]. During the raid, his security detail engaged the military, resulting in the deaths of eight cartel members and two wounded soldiers. El Mencho fled into the woods but was later killed in a subsequent firefight along with two bodyguards [15]. The cartel's response, coordinated by El Mencho's right-hand man Hugo "El Tuli" Macías, was immediate and massive, paralyzing the city of Guadalajara and spreading across 20 states with 252 roadblocks, vehicle burnings, and attacks on military installations [1, 15, 16]. The violence resulted in at least 72 fatalities, including 45 alleged cartel members and 26 security force members [15]. "El Tuli" was also killed by security forces in El Grullo, Jalisco, while coordinating the attacks [15, 16]. The death of El Mencho creates a significant power vacuum within the CJNG. Potential successors like his stepson Juan Carlos Valencia González and Audias "El Jardinero" Flores Silva reportedly lack the influence to consolidate control, which could lead to fragmentation or increased violence as commanders in key plazas vie for power [2, 3]. The cartel's ability to orchestrate a nationwide, multi-state response demonstrates its deep operational capacity and command-and-control structure, which may persist even without its founder.
CJNG Kills National Guard Captain with Car Bomb – Jalisco: As part of the nationwide retaliation, CJNG operatives used a car bomb to ambush and kill National Guard Captain Leonel Cardoso Gómez in San Juan de los Lagos, Jalisco, on February 22 [4, 12]. Captain Cardoso, coordinator for a highway security battalion, was responding to reports of an armed convoy when he encountered an abandoned pickup truck. As he approached the vehicle, it was remotely detonated. The explosion killed him instantly and wounded three other National Guard members. Video allegedly recorded by the perpetrators captured the moment of the attack [4]. The successful use of a vehicle-borne improvised explosive device (VBIED) in a targeted ambush marks a significant escalation in CJNG tactics. This method, commonly associated with terrorist organizations, demonstrates a higher level of sophistication and a clear intent to inflict maximum casualties on security forces, posing a heightened threat to military and law enforcement personnel.
Sinaloa Cartel Cell with Foreign Members Dismantled – Chiapas: On February 22, a multi-agency operation in Tapachula, Chiapas, resulted in the detention of 15 alleged members of a Sinaloa Cartel cell [10, 11]. The operation, which followed citizen complaints, involved a brief firefight but resulted in no casualties. Among the detainees were three former members of the Mara Salvatrucha (MS-13) and two Venezuelan nationals linked to the Tren de Aragua gang. Authorities also arrested Iván “S.L.,” identified as the cell's lead financial operator. Security forces seized 15 assault rifles, 40 magazines, approximately 1,000 rounds of ammunition, and nine vehicles [10]. The presence of ex-MS-13 and Tren de Aragua members within a Sinaloa Cartel cell on Mexico's southern border highlights a trend of Mexican drug trafficking organizations (DTOs) recruiting from transnational criminal organizations to leverage their specialized skills and expand operational reach. This collaboration poses complex security challenges in a region already stressed by migration and commerce, potentially strengthening trafficking routes from South America.
La Unión Tepito Financial Operators Arrested – Morelos: Authorities in Cuernavaca, Morelos, arrested Edgar “N,” alias “El Conta,” and Marissa “N,” alias “La Contadora,” on February 23 [8, 9]. The pair are identified as key financial operators for the La Unión Tepito DTO, working under Milton Jair “N,” alias “El Tepis.” They were detained at a shopping mall in possession of firearms, fentanyl, cocaine, and crystal meth. Edgar "N," a former assistant to the ex-mayor of Tetela del Volcán, is linked to extortion, drug distribution, and the murders of political actors in eastern Morelos. Marissa "N" allegedly served as a liaison with high-level officials to negotiate public works contracts [8]. These arrests highlight the expanding influence of Mexico City-based criminal groups like La Unión Tepito into neighboring states such as Morelos. The group's strategy involves deep infiltration of local political and administrative structures to facilitate money laundering and secure protection for its illicit activities, eroding governance and state control.
CJNG Plaza Chief Captured – Guerrero: On February 23, authorities in Acapulco, Guerrero, arrested Christian 'N', alias 'El Piter,' an alleged CJNG plaza chief [14]. His capture followed a wave of violence in the port city, including the burning of public transport vehicles, which he allegedly ordered to create chaos. 'El Piter' is also linked to the Cártel Independiente de Acapulco (CIDA) and was wanted for attempted homicide, property damage, and vehicle theft, as well as an armed attack on a Public Ministry facility in July 2025 [14]. The arrest of 'El Piter' underscores the volatile security situation in Acapulco, where CJNG and its affiliates continue to generate violence to exert control. His dual affiliation with CIDA points to the complex and fluid alliances between local and national DTOs in key territories, which complicates law enforcement efforts to stabilize the region.
DTO Activity and Tactics
DTO(s): Cártel Jalisco Nueva Generación (CJNG), Cártel de Sinaloa, La Unión Tepito
New or Adapted Tactics:
Mass-Scale Coordinated Retaliation: The CJNG’s response to the death of El Mencho was a centrally directed campaign of violence spanning 20 states, showcasing a high degree of command, control, and logistical capability to mobilize armed cells nationwide on short notice [1, 3, 15].
Recruitment of Foreign Criminals: The Sinaloa Cartel is integrating former members of Central and South American gangs, specifically MS-13 and Tren de Aragua, into its operational cells on Mexico's southern border [10].
Drone Counter-Surveillance: In Tecate, Baja California, military forces tracked a CJNG surveillance drone back to a safehouse, where they recovered weapons, fuel, and drugs. The incident indicates cartels are using drones not just for offensive purposes but also for tactical monitoring of law enforcement patrols in contested areas [5].
Geographic Trends:
Guadalajara's Enduring Importance for CJNG: Despite the recent spectacular violence, Guadalajara remains the CJNG’s core operational hub. The cartel maintains an “invisible” model of criminal governance in the city, using it to launder illicit profits, coordinate logistics, and exert social control through a network of local "plaza" bosses while typically maintaining a discreet profile [1, 3].
CJNG Presence in Acapulco: The arrest of Christian 'N', alias El Piter, in Acapulco, confirms the CJNG's operational ties with the Cártel Independiente de Acapulco (CIDA). El Piter is accused of ordering the burning of public transport vehicles to generate chaos in the port city [14].
Southern Border (Chiapas): The Sinaloa Cartel is consolidating its presence in Tapachula, a key strategic point on the border with Guatemala, by building cells with transnational criminal actors [10].
Central Mexico (Morelos): La Unión Tepito is expanding its criminal enterprise beyond Mexico City, establishing significant financial and operational footholds in Morelos by corrupting officials and controlling local illicit economies [8, 9].
Targeting Trends:
High-Ranking Security Forces: CJNG demonstrated its willingness to directly target and kill senior military leadership with sophisticated tactics like car bombs. The group also offered cash bounties for killing soldiers, aiming to demoralize and intimidate security forces [4, 12, 15, 16].
Security Force Infiltration: The arrest of the police director and 10 of his officers in Ecuandureo, Michoacán, for serving as lookouts ("halcones") for the CJNG, demonstrates the cartel's deep co-option of local state institutions. The officers allegedly used official communication devices to leak federal and state patrol movements to the cartel [13].
Political Figures: Public officials remain vulnerable. While the shooting involving the mayor of Bacanora, Sonora, which killed her son, was attributed to a road rage incident, La Unión Tepito's arrested financiers in Morelos are directly investigated for murdering political actors, highlighting the severe risks for officials who interfere with DTO operations [7, 8].
Civilian Populace and Infrastructure: CJNG's retaliatory attacks intentionally targeted the public to sow terror and paralyze economic activity. This included burning private vehicles, setting fire to businesses like an Oxxo in Rosarito, Baja California, and attacking public transportation systems [1, 6, 14].
Indicators to Watch
CJNG Succession Crisis: Monitor for signs of internal conflict within the CJNG as commanders vie for control following El Mencho's death. Increased violence in key states like Jalisco, Michoacán, Guanajuato, and Baja California could signal power struggles or fragmentation.
Territorial Control Shifts: Shifts in territorial control in key hotspots (Jalisco, Michoacán, Guanajuato, Baja California) as rivals such as the Sinaloa Cartel or Santa Rosa de Lima Cartel attempt to exploit the CJNG leadership vacuum.
Escalation of Asymmetric Tactics: Watch for further use of VBIEDs, rocket launchers, and other military-grade weaponry by CJNG and other groups in direct confrontations with the state.
Sinaloa Cartel's Southern Border Alliances: Increased reporting on the collaboration between the Sinaloa Cartel and foreign criminal groups like MS-13 and Tren de Aragua may indicate a strengthening of trafficking corridors through Central America.
Targeting of Political Figures: Monitor for any increase in threats, attacks, or assassinations of political candidates and public officials, particularly in states where DTOs like La Unión Tepito are expanding their territorial and political influence.
Deepening Social Control: Observe CJNG's methods of control in its strongholds like Guadalajara, including the use of forced disappearances and the co-opting of entire communities, which enables the group to maintain a low profile until it chooses to unleash spectacular violence.
