The illegal use of hacking tools by the Mexican government against activists and reporters has become a systematic policy of intimidation and harassment.

The president's office initially denied the Times report from June 19, stating there "was no proof" to claims the Mexican government illegally targeted citizens using spyware

But there is also evidence of three Mexican government agencies having purchased Pegasus: the Attorney General (for $15 million), the National Defense Ministry (for around $250 million), and the Center for Research and National Security, or CISEN (according to one of the leaked Hacking Team emails). What's more, the NSO Group claims it only does business with governments.

https://motherboard.vice.com/en_us/article/mbjyqx/mexico-hacking-and-spying-on-its-citizens-is-a-human-rights-crisis

https://www.nytimes.com/2017/06/19/world/americas/mexico-spyware-anticrime.html