The cartel had previously kidnapped the mayor and his son, releasing them after he agreed to replace the security chief—but the change never took place.