London Daily

Focus on the big picture.
Tuesday, Mar 10, 2026

President Rodrigo Chaves says Costa Rica is at war with Conti hackers

President Rodrigo Chaves says Costa Rica is at war with Conti hackers

The president of Costa Rica says his country is "at war", as cyber-criminals cause major disruption to IT systems of numerous government ministries.

Rodrigo Chaves said hackers infiltrated 27 government institutions, including municipalities and state-run utilities.

The Conti ransomware cartel, which is thought to be run from Russia, has upped its ransom demand to $20m (£16m).

The criminals posted an appeal online to Costa Ricans to "go out on the street and demand payment".

Mr Chaves held a press conference on Monday to outline his "Plan for Implementation of Cyber-security Measures".

He gave no indication that he was planning on paying the ransom, in spite of growing disruption to government departments.

On Wednesday, the Costa Rican Treasury told civil servants that the hack had affected automatic payment services. It warned that they would not be paid on time, and would need to apply for their salaries by email, or on paper by hand.

The ministry said: "Due to the temporary downturn of the institutional systems, the service of issuing certificates regarding the amounts of salaries owed to the civil servants of the Central Administration is suspended.

"All applications received via email or in the windows of the National Accountancy will be attended to once systems are restored."

According to the government, the attacks also affected the country's foreign trade by hitting its tax and customs systems.

Mr Chaves launches his Plan for Implementation of Cyber-security Measures in response to the hack


The president, who was elected fewer than two weeks ago, declared the incident a "national emergency" and has repeatedly blamed his predecessor for not taking the cyber-attack seriously enough.

The hackers were demanding $10m when the attack started last month.

A government website says that a declaration of a state of emergency allows it, in exceptional cases, to undertake on its own some procedures that would normally require legislative approval.

For example, it allows the government to allocate public funds to deal with an emergency, without previous legislative consent.

"The attack being experienced by Costa Rica at the hands of cyber-criminals, cyber-terrorists, is declared a national emergency," Mr Chavez said, according to local media.

"We are signing this decree, precisely, to declare a state of national emergency across the entire public sector of the Costa Rican state, and allow our society to respond to those attacks as criminal actions."

The Conti hacking group has posted more than 600 gigabytes of government data online, and is threatening to publish more.

It has also posted on its darknet website that it will delete the decryption keys needed to restore the government's computer systems to normality, unless it is paid within a week.

"There is less than a week left when we destroy your keys, we are also working on gaining access to your other systems, you have no other options but to pay us," it threatened.


On its darknet website, Conti writes to the Costa Rican government: "You're forcing us to use terrible methods..."

And "terrible" is the word many cyber-security researchers are using to describe these new tactics the hackers are using to put pressure on the Costa Rican government to pay.

In the past, ransomware crews have attacked public bodies and local governments, but it is rare to see such a disruptive attack on a state.

It's also unprecedented to see such aggressive threats and direct appeals to Costa Ricans to "take to the streets".

The hackers also claim to have operatives on the inside of government - which may be unlikely but further piles the pressure on the president.

In some ways it all reads like desperation.

Conti has probably put a lot of work into its attack and it looks like it may come away empty-handed.

But it is also another terrible reminder of the power criminal hackers can wield, even against governments.

Conti is a prolific Russian speaking ransomware group responsible for many high-profile hacks.

In May 2021, the group carried out a "catastrophic hack" of the Irish Health Service.

On 6 May, the US offered a $10m reward for information about the group's leadership.

It blamed Conti for the cyber-attacks which hit Costa Rica.


Cyber-security researcher Maya Horowitz, of Check Point, says Costa Rica is not the only country to be targeted by criminals, who may be put off US organisations because of pressure from the authorities there.

"Recently we have seen two massive ransomware attacks in Costa Rica and Peru, both reportedly executed by the infamous Conti ransomware gang.

"Based on our latest research, Conti's extortion planning is very focused and based on the ability of the victim to pay," she added.

Mrs Horowitz said the research also suggested that the financial impact of a ransomware attack is "seven times higher than the initial extortion demand, but we assume in the case of a wide attack on a government like we see here, the total costs will be considerably more".


Watch: What is ransomware and how does it work?


Newsletter

Related Articles

0:00
0:00
Close
Roman Abramovich Signals Legal Fight if UK Seeks to Seize Chelsea Sale Funds
UK Ready to Back Emergency Oil Reserve Release as Middle East Conflict Pushes Prices Higher
Study of 40,000 Articles Sparks Debate Over Alleged Anti-Muslim Bias in UK Media
US and UK Army Chiefs Strengthen Cooperation on the Future of Armored Warfare
Britain’s Search for the Next ARM Intensifies as Startups and Investors Target the Semiconductor Frontier
Three US Strategic Bombers Arrive at RAF Fairford as Iran Conflict Intensifies
Cancer Death Rates in the UK Fall to the Lowest Level on Record
UK Government Bond Yields Retreat Slightly After Sharp Spike Triggered by Middle East Conflict
UK Chancellor Warns Middle East War Could Push Inflation Higher
UK Prime Minister Warns Iran Conflict Could Drive Up Prices and Threaten Economic Stability
Trump Declines UK Offer to Deploy Aircraft Carriers to Middle East Amid Iran Conflict
Prince Harry and Meghan Markle to Return to Australia After Seven Years for Philanthropic and Business Engagements
UK Government Signals Independence From Washington as Cooper Says Britain Does Not Agree With Trump on Every Issue
UK Experts Warn AI Chatbots Are Fueling Surge in Claims of Organised ‘Satanic’ Ritual Abuse
UK Political Parties Divided Over Strategy as Iran Conflict Reshapes Foreign Policy Debate
Britain Discloses Secret Military Repair Hubs Operating Inside Ukraine
Trump Says US No Longer Needs UK Carrier Support After Delayed Offer Amid Iran Conflict
Why Britain Has Become Involved in the US-Israel Military Campaign Against Iran
UK Gas Storage Falls to Under Two Days as Iran Conflict Jolts Global Energy Markets
UK Warned to Brace for Economic Shock as Iran War Drives Global Energy Price Surge
Starmer and Trump Hold First Call After Public Dispute Over Iran Conflict
UK Dentists Returned £1.3 Billion to Government as Shift Toward Private Care Accelerates
Expert Warns UK Must Build Emergency Food Stockpiles to Prepare for Climate Shocks or War
UK Plans Charter Flight to Evacuate British Nationals from Gulf as Regional Conflict Disrupts Air Travel
Families of Zimbabwe’s Liberation Fighters Call on Britain to Help Locate Skulls Taken During Colonial War
Iran’s Ambassador Warns Britain to ‘Be Very Careful’ Over Deeper Role in Expanding Middle East War
UK Military Leadership Defends Britain’s Defensive Role in Expanding Middle East Conflict
Four U.S. Strategic Bombers Arrive in Britain as Iran War Intensifies
Soham Murderer Ian Huntley Dies After Violent Attack in High-Security Prison
UK Lawmakers and Experts Condemn Scale of Overseas Human Remains Held in British Museums
Royal Navy Aircraft Carrier HMS Prince of Wales Placed on Standby for Potential Deployment
United Kingdom Confirms U.S. Military Using British Bases for Operations Targeting Iranian Missile Sites
Starmer Defends UK Role in Iran Conflict After Renewed Criticism from President Trump
Blue Owl Reveals £36 Million Exposure After Collapse of UK Lender Serving Wealthy Clients
UK Asylum Reform Plan Triggers Fierce Debate Over Border Control and Humanitarian Impact
US Stealth Bombers Head to UK Base as Trump Issues Stark Warning to Iran
UK Deputy Prime Minister Says Legal Case Could Exist for British Strikes on Iranian Missile Sites
Investigators Link Mysterious Parcel Fires Across Europe to Russian Intelligence Operation
Debate Intensifies Over Britain’s Legal Justification for US Military Operations Launched From UK Bases
Britain Faces Heightened Energy Price Risks as Iran-Linked Tensions Threaten Global Oil and Gas Supplies
British Counter-Terror Police Arrest Four Suspected of Spying on Jewish Community for Iran
Axel Springer Agrees $770 Million Deal to Acquire Britain’s Daily Telegraph
Iceland Supermarket Drops Trademark Challenge Against Icelandic Government in Long-Running Naming Dispute
UK Defence Secretary Visits Cyprus Following Scrutiny of Britain’s Response to Drone Attacks
Questions Grow Over Britain’s Military Readiness as Response to Iran Conflict Draws Scrutiny
UK Offers Failed Asylum Seeker Families Up to Forty Thousand Pounds to Leave Voluntarily
Saharan Dust Could Bring ‘Blood Rain’ to Parts of the UK as Weather Systems Shift
UK Deploys Additional Typhoon Fighter Jets to Qatar and Helicopters to Cyprus Amid Rising Middle East Tensions
Experts Urge Britain to Accelerate Renewable Energy Push as Global Conflicts Drive Up Costs
British Public Shows Strong Reluctance to Join Wider War in Iran
×