The U.S. State Department currently assigns Mexico an overall Level 2 travel advisory, meaning travelers are urged to exercise increased caution, but the actual risk level varies widely by state.
Each Mexican state is individually rated from Level 1 to Level 4; for example, Yucatán and Campeche are Level 1, while Baja California Sur, Quintana Roo, Mexico City, Oaxaca, and many other popular tourist areas are Level 2, comparable to countries such as Canada, France, and the United Kingdom.
Several states, including Jalisco and Baja California, carry a Level 3 advisory, urging travelers to reconsider travel due to cartel-related violence, while others such as Guerrero, Michoacán, Sinaloa, Tamaulipas, and Zacatecas are at Level 4 with guidance not to travel because of high levels of crime, kidnapping risk, and limited government assistance in emergencies.
Sources: https://www.yahoo.com/news/articles/safe-mexico-spring-break-travelers-120137480.html
Commentary
Kidnap and ransom risk in Mexico is closely tied to organized crime and varies widely by region, with several states carrying higher advisories because of kidnapping, carjacking, and armed robbery, targeting both locals and foreigners.
Criminal groups use traditional abductions for ransom as well as "express kidnappings," which are short-term abductions in which victims are forced to withdraw cash from ATMs or provide quick payments before release.
Organizations sending employees to Mexico should treat kidnapping as a foreseeable risk in higher-advisory states and embed it into travel policies, pre-trip briefings, and crisis-management plans, including kidnap and ransom insurance and clear internal reporting protocols.
Travelers can reduce exposure by staying in reputable hotels in safer zones, arranging transport through vetted providers rather than hailing taxis on the street, limiting alcohol use, avoiding displays of wealth, and using indoor ATMs during the day instead of on the street.
The final takeaway is that it is important to check the specific advisory level for the state being visited, enroll in the Smart Traveler Enrollment Program, keep itineraries and contact details updated with employers and family, and have a plan for what to do and whom to contact if a traveler goes missing or communications suddenly stop.