London Daily

Focus on the big picture.
Saturday, Aug 15, 2026

President Rodrigo Chaves says Costa Rica is at war with Conti hackers

President Rodrigo Chaves says Costa Rica is at war with Conti hackers

The president of Costa Rica says his country is "at war", as cyber-criminals cause major disruption to IT systems of numerous government ministries.

Rodrigo Chaves said hackers infiltrated 27 government institutions, including municipalities and state-run utilities.

The Conti ransomware cartel, which is thought to be run from Russia, has upped its ransom demand to $20m (£16m).

The criminals posted an appeal online to Costa Ricans to "go out on the street and demand payment".

Mr Chaves held a press conference on Monday to outline his "Plan for Implementation of Cyber-security Measures".

He gave no indication that he was planning on paying the ransom, in spite of growing disruption to government departments.

On Wednesday, the Costa Rican Treasury told civil servants that the hack had affected automatic payment services. It warned that they would not be paid on time, and would need to apply for their salaries by email, or on paper by hand.

The ministry said: "Due to the temporary downturn of the institutional systems, the service of issuing certificates regarding the amounts of salaries owed to the civil servants of the Central Administration is suspended.

"All applications received via email or in the windows of the National Accountancy will be attended to once systems are restored."

According to the government, the attacks also affected the country's foreign trade by hitting its tax and customs systems.

Mr Chaves launches his Plan for Implementation of Cyber-security Measures in response to the hack


The president, who was elected fewer than two weeks ago, declared the incident a "national emergency" and has repeatedly blamed his predecessor for not taking the cyber-attack seriously enough.

The hackers were demanding $10m when the attack started last month.

A government website says that a declaration of a state of emergency allows it, in exceptional cases, to undertake on its own some procedures that would normally require legislative approval.

For example, it allows the government to allocate public funds to deal with an emergency, without previous legislative consent.

"The attack being experienced by Costa Rica at the hands of cyber-criminals, cyber-terrorists, is declared a national emergency," Mr Chavez said, according to local media.

"We are signing this decree, precisely, to declare a state of national emergency across the entire public sector of the Costa Rican state, and allow our society to respond to those attacks as criminal actions."

The Conti hacking group has posted more than 600 gigabytes of government data online, and is threatening to publish more.

It has also posted on its darknet website that it will delete the decryption keys needed to restore the government's computer systems to normality, unless it is paid within a week.

"There is less than a week left when we destroy your keys, we are also working on gaining access to your other systems, you have no other options but to pay us," it threatened.


On its darknet website, Conti writes to the Costa Rican government: "You're forcing us to use terrible methods..."

And "terrible" is the word many cyber-security researchers are using to describe these new tactics the hackers are using to put pressure on the Costa Rican government to pay.

In the past, ransomware crews have attacked public bodies and local governments, but it is rare to see such a disruptive attack on a state.

It's also unprecedented to see such aggressive threats and direct appeals to Costa Ricans to "take to the streets".

The hackers also claim to have operatives on the inside of government - which may be unlikely but further piles the pressure on the president.

In some ways it all reads like desperation.

Conti has probably put a lot of work into its attack and it looks like it may come away empty-handed.

But it is also another terrible reminder of the power criminal hackers can wield, even against governments.

Conti is a prolific Russian speaking ransomware group responsible for many high-profile hacks.

In May 2021, the group carried out a "catastrophic hack" of the Irish Health Service.

On 6 May, the US offered a $10m reward for information about the group's leadership.

It blamed Conti for the cyber-attacks which hit Costa Rica.


Cyber-security researcher Maya Horowitz, of Check Point, says Costa Rica is not the only country to be targeted by criminals, who may be put off US organisations because of pressure from the authorities there.

"Recently we have seen two massive ransomware attacks in Costa Rica and Peru, both reportedly executed by the infamous Conti ransomware gang.

"Based on our latest research, Conti's extortion planning is very focused and based on the ability of the victim to pay," she added.

Mrs Horowitz said the research also suggested that the financial impact of a ransomware attack is "seven times higher than the initial extortion demand, but we assume in the case of a wide attack on a government like we see here, the total costs will be considerably more".


Watch: What is ransomware and how does it work?


Newsletter

Related Articles

0:00
0:00
Close
UK and Finland Discuss European Defence and Continued Support for Ukraine
Nigel Farage Wins Clacton By-Election to Return to the House of Commons
UK Government Deploys Military to Help Fight Wildfires and Bans Disposable Barbecues
UK Records Hottest Day of the Year as Fifth Summer Heatwave Peaks in Southern England
UK Condemns Houthi Actions and Warns of Red Sea Threat to Global Trade
UK and Solomon Islands Open Wildlife Photography Exhibition in Honiara
UK Small Businesses Face Continued Cash Flow and Tax Pressures
Greatham Marsh Restoration Restores Tidal Wetland in Hartlepool After More Than 200 Years
UK Health Regulator Urges University Students to Check Meningitis and Measles Vaccination Status
Mining Remediation Authority Completes Major Ground Stabilization Works in Scottish Community
UK Food Crime Investigators Seize 33 Tonnes of Illegal Food in Multi-Agency Operation
Technical Qualification Uptake Hits Record High as Advanced Mathematics Results Improve
UK Summer Temperatures on Course to Challenge Long-Standing Records, Met Office Says
UK Farmers Bring Forward Cereal Harvests as Drought Threatens Yields
Wildfires Surge Across England and Wales as Fire Chiefs Report Record July
UK Nurses Warn of Heat Risks as Hospital Staff Struggle With Extreme Temperatures
Southern Water Seeks Drought Order for Hampshire and Isle of Wight Amid Water Shortages
UK Heatwave Pushes West London Temperature to 38.1 Degrees as Health Alerts Continue
UK Economy Grows 0.4% in Second Quarter Despite Global Uncertainty
China’s Kimi Launches AI-Focused Credit Card With Agricultural Bank of China and American Express
UK Residents Gather to Watch Rare Partial Solar Eclipse
Reform UK Deputy Leader Richard Tice Faces Criticism Over Legal Threat Against Guardian Journalist
Michael Forsyth Elected Speaker of the House of Lords
Cambridge Researchers Launch £20 Million Human Organoid Drug Testing Programme
Heathrow Loses European Passenger Traffic Lead to Istanbul Airport
Households Near New UK Electricity Pylons to Receive £250 Annual Energy Bill Discount
UK Government Estimates Zero-Hours Contract Ban Could Cost Employers Up to £3 Billion a Year
Robert Jenrick Leaves Conservatives for Reform UK in Major Parliamentary Defection
UK Police Chiefs Urge Government to Block Early Release of Andrew Harper Killers
UK Government Holds Emergency Cobra Meeting as Drought and Heatwave Raise Wildfire Risks
Former Labour Adviser Arrested on Suspicion of Spying for China Held Privileged Access as Top Party Donor
Turkish Parliament Passes Landmark Bill Granting Conditional Amnesty to Disarmed PKK Members
Donald Trump Warns FIFA Against Ousting Gianni Infantino Amid Revolt by Global Football Leaders
Jeff Bezos Joins Investor Group Closing In on $6 Billion Liverpool FC Stake
Police Conduct Cross-Border Raids Against Northern England Drug Network
Nicola Sturgeon Protested at Edinburgh Festival Fringe Event
Major UK Retail Chain Enters Administration With One Hundred Fifty-Four Stores Set to Close
Heathrow Renews Call for Runway Expansion After Losing Europe’s Busiest Airport Ranking
Government Condemns One Million Pound Thames Water Executive Bonus Amid Drought
NHS England Says More Than One Hundred Thousand Hepatitis C Patients Have Been Cured
UK Foreign Secretary Ed Miliband Calls for End to West Bank Settler Violence
UK Prepares for Deepest Partial Solar Eclipse Since Nineteen Ninety-Nine
UK Heatwave Triggers Amber Health Alerts as Economic Losses Reach Four Point Four Billion Pounds
UK Offers Electricity Bill Discounts to Communities Hosting New Power Infrastructure
Bank of England Expected to Hold Interest Rates at Three Point Seven Five Percent
UK Government Moves to Ban Subscription Traps and Misleading Retail Discounts
Andy Burnham Gives Councils New Powers to Block Betting and Vape Shops
UK Councils to Receive Sweeping Planning Powers to Ban New Vape and Betting Shops
Nicola Sturgeon Says She Has No Contact With Estranged Husband After SNP Embezzlement Case
Police Arrest Two Men After Aberdeenshire Defense Technology Office Break-In
×