London Daily

Focus on the big picture.
Saturday, Jul 04, 2026

President Rodrigo Chaves says Costa Rica is at war with Conti hackers

President Rodrigo Chaves says Costa Rica is at war with Conti hackers

The president of Costa Rica says his country is "at war", as cyber-criminals cause major disruption to IT systems of numerous government ministries.

Rodrigo Chaves said hackers infiltrated 27 government institutions, including municipalities and state-run utilities.

The Conti ransomware cartel, which is thought to be run from Russia, has upped its ransom demand to $20m (£16m).

The criminals posted an appeal online to Costa Ricans to "go out on the street and demand payment".

Mr Chaves held a press conference on Monday to outline his "Plan for Implementation of Cyber-security Measures".

He gave no indication that he was planning on paying the ransom, in spite of growing disruption to government departments.

On Wednesday, the Costa Rican Treasury told civil servants that the hack had affected automatic payment services. It warned that they would not be paid on time, and would need to apply for their salaries by email, or on paper by hand.

The ministry said: "Due to the temporary downturn of the institutional systems, the service of issuing certificates regarding the amounts of salaries owed to the civil servants of the Central Administration is suspended.

"All applications received via email or in the windows of the National Accountancy will be attended to once systems are restored."

According to the government, the attacks also affected the country's foreign trade by hitting its tax and customs systems.

Mr Chaves launches his Plan for Implementation of Cyber-security Measures in response to the hack


The president, who was elected fewer than two weeks ago, declared the incident a "national emergency" and has repeatedly blamed his predecessor for not taking the cyber-attack seriously enough.

The hackers were demanding $10m when the attack started last month.

A government website says that a declaration of a state of emergency allows it, in exceptional cases, to undertake on its own some procedures that would normally require legislative approval.

For example, it allows the government to allocate public funds to deal with an emergency, without previous legislative consent.

"The attack being experienced by Costa Rica at the hands of cyber-criminals, cyber-terrorists, is declared a national emergency," Mr Chavez said, according to local media.

"We are signing this decree, precisely, to declare a state of national emergency across the entire public sector of the Costa Rican state, and allow our society to respond to those attacks as criminal actions."

The Conti hacking group has posted more than 600 gigabytes of government data online, and is threatening to publish more.

It has also posted on its darknet website that it will delete the decryption keys needed to restore the government's computer systems to normality, unless it is paid within a week.

"There is less than a week left when we destroy your keys, we are also working on gaining access to your other systems, you have no other options but to pay us," it threatened.


On its darknet website, Conti writes to the Costa Rican government: "You're forcing us to use terrible methods..."

And "terrible" is the word many cyber-security researchers are using to describe these new tactics the hackers are using to put pressure on the Costa Rican government to pay.

In the past, ransomware crews have attacked public bodies and local governments, but it is rare to see such a disruptive attack on a state.

It's also unprecedented to see such aggressive threats and direct appeals to Costa Ricans to "take to the streets".

The hackers also claim to have operatives on the inside of government - which may be unlikely but further piles the pressure on the president.

In some ways it all reads like desperation.

Conti has probably put a lot of work into its attack and it looks like it may come away empty-handed.

But it is also another terrible reminder of the power criminal hackers can wield, even against governments.

Conti is a prolific Russian speaking ransomware group responsible for many high-profile hacks.

In May 2021, the group carried out a "catastrophic hack" of the Irish Health Service.

On 6 May, the US offered a $10m reward for information about the group's leadership.

It blamed Conti for the cyber-attacks which hit Costa Rica.


Cyber-security researcher Maya Horowitz, of Check Point, says Costa Rica is not the only country to be targeted by criminals, who may be put off US organisations because of pressure from the authorities there.

"Recently we have seen two massive ransomware attacks in Costa Rica and Peru, both reportedly executed by the infamous Conti ransomware gang.

"Based on our latest research, Conti's extortion planning is very focused and based on the ability of the victim to pay," she added.

Mrs Horowitz said the research also suggested that the financial impact of a ransomware attack is "seven times higher than the initial extortion demand, but we assume in the case of a wide attack on a government like we see here, the total costs will be considerably more".


Watch: What is ransomware and how does it work?


Newsletter

Related Articles

0:00
0:00
Close
UK Government Consults International Partners on Maritime Trade Security and Energy Market Stability
Rare Revolutionary-Era Documents Discovered by UK Archives and Undergoing Authentication
UK Consumer Confidence Remains Deep in Negative Territory as Household Spending Stays Cautious
Transport for London Warns of Severe Disruption as Major Events Converge in Central London
NHS and Social Care Sectors Face Ongoing Recruitment Shortages Amid Persistent Workforce Gaps
Rising Energy Costs Drive Price Pressures Across UK Retail and Service Sectors
Competition and Markets Authority Expands Review of Artificial Intelligence Impact on UK Media Markets
UK Parliamentary Committees Intensify Scrutiny of National Security and Industrial Policy Legislation
Bank of England Faces Persistent Inflation Pressure as Rate Cut Expectations Fade
UK Public Finances Under Pressure as Borrowing Exceeds Forecast and Debt Nears 95% of GDP
Major Police Deployment Across Central London as Mass Demonstrations and Pride Parade Converge
Large-Scale Police Dispersal Powers Activated in Liverpool Ahead of Anti-Immigration Protests and Counter-Demonstrations
Luxury bags take over the World Cup: style, status symbol, or just showing off?
National Productivity Institute Highlights Weak Business Investment Outside Southern England
UK High Court Orders Reassessment of Environmental Impact in Major Highway Project
UK Cyber Security Centre Warns of Rising Threat From State-Sponsored Digital Espionage
UK Education Secretary Launches National Reform of Apprenticeships and Vocational Training
Financial Conduct Authority Tightens Climate Risk Disclosure Requirements for Listed Firms
Rail Union Suspends Planned Strike Action to Enter Formal Negotiations With Operators
Northern Ireland Businesses Seek Clarity Over Post-Brexit Trade Rules
Welsh Government Launches Regional Growth Plan Targeting Transport and Digital Infrastructure
North Sea Wind Sector Attracts £5 Billion Investment Amid Expansion of Offshore Capacity
Scotland and UK Governments Establish New Framework for Coordinated Investment in Energy and Infrastructure
UK Government Launches Major Immigration and Border Policy Overhaul Review
Bank of England Signals Interest Rates to Remain Elevated Despite Easing Inflation Pressures
National Health Service Warns of Severe Winter Capacity Strain Across Hospital Trusts
Chancellor Orders Urgent Treasury Review Amid Concerns Over Structural Public Finance Gap
Prime Minister Unveils Sweeping Legislative Programme Focused on Housing, Health Service Reform and State Energy Plan
UK Parliamentary Committee Launches Inquiry Into Falling Primary School Rolls and Public Service Impact
UK House of Lords Debates Electoral Commission Powers and Political Finance Reform
UK Parliament Considers Expanding Carbon Rules to International Aviation and Shipping Emissions
UK Traffic Commissioner Revokes Hampshire Haulage Operator Licence Over Regulatory Failures
UK Parliament Examines Risks in Public Contracts Awarded to Technology Firm Palantir
UK Competition Watchdog Moves Toward More Flexible Merger Rules to Support Efficiency and Growth
UK Government Seeks Approval for £1.15 Trillion Public Spending Plan Amid Scrutiny Over Department Budgets
UK Parliament Debates Sweeping National Security and Steel Industry Nationalisation Bills
UK Government Issues Formal Apology for Historic Forced Adoption Practices and Announces £4 Million Support Scheme
UK DEFENCE AND TECHNOLOGY STRATEGY TILTS TOWARD SOVEREIGN CAPABILITY AND INDUSTRIAL INVESTMENT
UK ECONOMIC POLICY OUTLOOK SHAPED BY LEADERSHIP TRANSITION AND FISCAL SIGNALS
STERLING STRENGTHENS AMID SHIFTING MONETARY OUTLOOK AND GLOBAL LABOUR MARKET SIGNALS
UK HPV VACCINATION PROGRAM NEARLY ELIMINATES CERVICAL CANCER DEATH RISK IN YOUNG WOMEN
UK EXPANDS PRISON SAFETY REVIEW AS GOVERNMENT SEEKS WIDER SYSTEM REFORM
UK DRIVES DIGITAL ASSETS STRATEGY WITH NEW STABLECOIN REGULATORY MODEL
UK TO EXPAND AI INFRASTRUCTURE THROUGH NEW EUROPEAN TECHNOLOGY PARTNERSHIP
UK LAUNCHES £15 BILLION DEFENCE TECH SHIFT TOWARD ADVANCED MILITARY SYSTEMS
CIVIL SERVICE FACES SHIFT IN POWER STRUCTURE AS REGIONAL GOVERNANCE PLANS EXPAND
WHITEHALL CONSIDERS MAJOR DECENTRALISATION PLAN WITH SECOND GOVERNMENT HUB IN MANCHESTER
UK TARGETS SERVICES EXPORT GROWTH IN TRADE TALKS WITH CHINA AMID GEOPOLITICAL TENSIONS
POLICE WATCHDOG PROBES OFFICERS OVER HANDCUFFING OF DYING TEENAGER IN HAMPSHIRE CASE
UK REGULATORS UNVEIL DUAL OVERSIGHT FRAMEWORK FOR STABLECOINS AND DIGITAL ASSETS
×