London Daily

Focus on the big picture.
Saturday, Sep 05, 2026

President Rodrigo Chaves says Costa Rica is at war with Conti hackers

President Rodrigo Chaves says Costa Rica is at war with Conti hackers

The president of Costa Rica says his country is "at war", as cyber-criminals cause major disruption to IT systems of numerous government ministries.

Rodrigo Chaves said hackers infiltrated 27 government institutions, including municipalities and state-run utilities.

The Conti ransomware cartel, which is thought to be run from Russia, has upped its ransom demand to $20m (£16m).

The criminals posted an appeal online to Costa Ricans to "go out on the street and demand payment".

Mr Chaves held a press conference on Monday to outline his "Plan for Implementation of Cyber-security Measures".

He gave no indication that he was planning on paying the ransom, in spite of growing disruption to government departments.

On Wednesday, the Costa Rican Treasury told civil servants that the hack had affected automatic payment services. It warned that they would not be paid on time, and would need to apply for their salaries by email, or on paper by hand.

The ministry said: "Due to the temporary downturn of the institutional systems, the service of issuing certificates regarding the amounts of salaries owed to the civil servants of the Central Administration is suspended.

"All applications received via email or in the windows of the National Accountancy will be attended to once systems are restored."

According to the government, the attacks also affected the country's foreign trade by hitting its tax and customs systems.

Mr Chaves launches his Plan for Implementation of Cyber-security Measures in response to the hack


The president, who was elected fewer than two weeks ago, declared the incident a "national emergency" and has repeatedly blamed his predecessor for not taking the cyber-attack seriously enough.

The hackers were demanding $10m when the attack started last month.

A government website says that a declaration of a state of emergency allows it, in exceptional cases, to undertake on its own some procedures that would normally require legislative approval.

For example, it allows the government to allocate public funds to deal with an emergency, without previous legislative consent.

"The attack being experienced by Costa Rica at the hands of cyber-criminals, cyber-terrorists, is declared a national emergency," Mr Chavez said, according to local media.

"We are signing this decree, precisely, to declare a state of national emergency across the entire public sector of the Costa Rican state, and allow our society to respond to those attacks as criminal actions."

The Conti hacking group has posted more than 600 gigabytes of government data online, and is threatening to publish more.

It has also posted on its darknet website that it will delete the decryption keys needed to restore the government's computer systems to normality, unless it is paid within a week.

"There is less than a week left when we destroy your keys, we are also working on gaining access to your other systems, you have no other options but to pay us," it threatened.


On its darknet website, Conti writes to the Costa Rican government: "You're forcing us to use terrible methods..."

And "terrible" is the word many cyber-security researchers are using to describe these new tactics the hackers are using to put pressure on the Costa Rican government to pay.

In the past, ransomware crews have attacked public bodies and local governments, but it is rare to see such a disruptive attack on a state.

It's also unprecedented to see such aggressive threats and direct appeals to Costa Ricans to "take to the streets".

The hackers also claim to have operatives on the inside of government - which may be unlikely but further piles the pressure on the president.

In some ways it all reads like desperation.

Conti has probably put a lot of work into its attack and it looks like it may come away empty-handed.

But it is also another terrible reminder of the power criminal hackers can wield, even against governments.

Conti is a prolific Russian speaking ransomware group responsible for many high-profile hacks.

In May 2021, the group carried out a "catastrophic hack" of the Irish Health Service.

On 6 May, the US offered a $10m reward for information about the group's leadership.

It blamed Conti for the cyber-attacks which hit Costa Rica.


Cyber-security researcher Maya Horowitz, of Check Point, says Costa Rica is not the only country to be targeted by criminals, who may be put off US organisations because of pressure from the authorities there.

"Recently we have seen two massive ransomware attacks in Costa Rica and Peru, both reportedly executed by the infamous Conti ransomware gang.

"Based on our latest research, Conti's extortion planning is very focused and based on the ability of the victim to pay," she added.

Mrs Horowitz said the research also suggested that the financial impact of a ransomware attack is "seven times higher than the initial extortion demand, but we assume in the case of a wide attack on a government like we see here, the total costs will be considerably more".


Watch: What is ransomware and how does it work?


Newsletter

Related Articles

0:00
0:00
Close
UK Urges Households to Keep Emergency Supplies Amid Severe El Niño Warning
Prime Minister Andy Burnham Sets Out Regional Industry and Prison Reform Agenda
Siemens Energy Wins Rolls-Royce Small Modular Reactor Manufacturing Contract
UK Mortgage Costs Rise as Gilt Yields and Swap Rates Climb
Bank of England’s Huw Pill Calls for Prompt Rate Rise as Inflation Risks Persist
National Audit Office Warns UK Is Unprepared for Major Food Supply Disruptions
British Army Suspends Some Training Exercises as Budget Pressures Intensify
HMS Queen Elizabeth Deploys as NATO Allied Response Force Command Ship
Reform UK Suspends Two Senior Officials Over Alleged Foreign Donation Scheme
UK Reasserts Falkland Islands Sovereignty After Argentina Threatens Sanctions
Scottish Tech Company PureLifi Enters Administration With More Than 40 Job Losses
Scottish Government Names Alyn Smith Innovation and Education Minister
Green Party Co-Leader Zack Polanski to Contest By-Election for Keir Starmer’s Former Seat
Palestine Action Activists Appeal Terrorism-Related Prison Sentences
PwC Report Highlights Persistent Regional Spending-Power Divide Across Britain
UK Names Hundreds of Employers for Minimum Wage Violations
UK Commits £400 Million to International Tropical Forest Fund
UK Extends £2 Bus Fare Cap Across England Through 2027
UK Warns Travellers as US-Iran Tensions Disrupt Middle East Security and Shipping
Andy Burnham Faces Kemi Badenoch in First Prime Minister’s Questions
Kemi Badenoch Names Andrew Griffith Shadow Chancellor in Conservative Reshuffle
UK Treasury and Markets Focus on Fiscal Headroom Ahead of Autumn Budget
UK Government Reverses Early Release Plans for Serious Violent and Sexual Offences
UK and France Review Border Cooperation After 48,000 Small-Boat Crossings Prevented
UK Growth Outlook Weakens as Inflation and Energy Costs Rise
Breeding Tropical Mosquitoes Discovered in East London
Sadiq Khan Agrees to Search of Digital Communications in Palantir Lawsuit
Scottish Protesters Call for Moratorium on AI Data Centre Expansion
Uber Drivers Bring London Class Action Over Algorithmic Management
Reform UK Accepts £4 Million Donation From Cryptocurrency Billionaire Pardoned by Trump
Justice Secretary Tightens Early Release Scheme to Exclude Manslaughter Offenders
Kemi Badenoch Reshuffles Conservative Team as Reform UK Pressure Grows
British Mortgage Rates Rise as Global Bond Sell-Off Pushes Up Borrowing Costs
UK Records Hottest Summer on Record in 2026
UK Government Urges Households to Stock Essential Supplies Ahead of Severe El Niño Risk
UK Prepares Targeted Sanctions Over Israeli Settlements in West Bank
Reform UK Faces Electoral and Police Scrutiny Over Foreign Donation Allegations
UK and France Expand Channel Migration Cooperation as Trade Tensions Surface
UK Marks Merchant Navy Day With Tribute to Civilian Seafarers
Burnham Pays Tribute to Two Police Officers Killed on Duty in Northern England
Booking.com Left Fake Downing Street Listing Online for Two Months, Which Says
Burnham and Macron to Review UK-France Cooperation on Channel Crossings
UK Business Confidence Improves Slightly but Investment Concerns Persist
Burnham Faces Pressure Over Future North Sea Oil and Gas Licences
Burnham Pushes Wider English Devolution Through ‘Number Ten North’
British Chambers of Commerce Raises 2026 UK Growth Forecast to 1%
Keir Starmer Resigns as Holborn and St Pancras MP, Triggering By-Election
UK Chancellor Faces Tighter Budget Headroom as Long-Term Borrowing Costs Rise
UK Government Weighs Thames Water Nationalisation as Financial Crisis Deepens
Prime Minister Andy Burnham Faces First Commons Questions Over Tax and Spending Plans
×