Beautiful Virgin Islands

Thursday, Jan 29, 2026

President Rodrigo Chaves says Costa Rica is at war with Conti hackers

President Rodrigo Chaves says Costa Rica is at war with Conti hackers

The president of Costa Rica says his country is "at war", as cyber-criminals cause major disruption to IT systems of numerous government ministries.

Rodrigo Chaves said hackers infiltrated 27 government institutions, including municipalities and state-run utilities.

The Conti ransomware cartel, which is thought to be run from Russia, has upped its ransom demand to $20m (£16m).

The criminals posted an appeal online to Costa Ricans to "go out on the street and demand payment".

Mr Chaves held a press conference on Monday to outline his "Plan for Implementation of Cyber-security Measures".

He gave no indication that he was planning on paying the ransom, in spite of growing disruption to government departments.

On Wednesday, the Costa Rican Treasury told civil servants that the hack had affected automatic payment services. It warned that they would not be paid on time, and would need to apply for their salaries by email, or on paper by hand.

The ministry said: "Due to the temporary downturn of the institutional systems, the service of issuing certificates regarding the amounts of salaries owed to the civil servants of the Central Administration is suspended.

"All applications received via email or in the windows of the National Accountancy will be attended to once systems are restored."

According to the government, the attacks also affected the country's foreign trade by hitting its tax and customs systems.

Mr Chaves launches his Plan for Implementation of Cyber-security Measures in response to the hack


The president, who was elected fewer than two weeks ago, declared the incident a "national emergency" and has repeatedly blamed his predecessor for not taking the cyber-attack seriously enough.

The hackers were demanding $10m when the attack started last month.

A government website says that a declaration of a state of emergency allows it, in exceptional cases, to undertake on its own some procedures that would normally require legislative approval.

For example, it allows the government to allocate public funds to deal with an emergency, without previous legislative consent.

"The attack being experienced by Costa Rica at the hands of cyber-criminals, cyber-terrorists, is declared a national emergency," Mr Chavez said, according to local media.

"We are signing this decree, precisely, to declare a state of national emergency across the entire public sector of the Costa Rican state, and allow our society to respond to those attacks as criminal actions."

The Conti hacking group has posted more than 600 gigabytes of government data online, and is threatening to publish more.

It has also posted on its darknet website that it will delete the decryption keys needed to restore the government's computer systems to normality, unless it is paid within a week.

"There is less than a week left when we destroy your keys, we are also working on gaining access to your other systems, you have no other options but to pay us," it threatened.


On its darknet website, Conti writes to the Costa Rican government: "You're forcing us to use terrible methods..."

And "terrible" is the word many cyber-security researchers are using to describe these new tactics the hackers are using to put pressure on the Costa Rican government to pay.

In the past, ransomware crews have attacked public bodies and local governments, but it is rare to see such a disruptive attack on a state.

It's also unprecedented to see such aggressive threats and direct appeals to Costa Ricans to "take to the streets".

The hackers also claim to have operatives on the inside of government - which may be unlikely but further piles the pressure on the president.

In some ways it all reads like desperation.

Conti has probably put a lot of work into its attack and it looks like it may come away empty-handed.

But it is also another terrible reminder of the power criminal hackers can wield, even against governments.

Conti is a prolific Russian speaking ransomware group responsible for many high-profile hacks.

In May 2021, the group carried out a "catastrophic hack" of the Irish Health Service.

On 6 May, the US offered a $10m reward for information about the group's leadership.

It blamed Conti for the cyber-attacks which hit Costa Rica.


Cyber-security researcher Maya Horowitz, of Check Point, says Costa Rica is not the only country to be targeted by criminals, who may be put off US organisations because of pressure from the authorities there.

"Recently we have seen two massive ransomware attacks in Costa Rica and Peru, both reportedly executed by the infamous Conti ransomware gang.

"Based on our latest research, Conti's extortion planning is very focused and based on the ability of the victim to pay," she added.

Mrs Horowitz said the research also suggested that the financial impact of a ransomware attack is "seven times higher than the initial extortion demand, but we assume in the case of a wide attack on a government like we see here, the total costs will be considerably more".


Watch: What is ransomware and how does it work?


Newsletter

Related Articles

Beautiful Virgin Islands
0:00
0:00
Close
Tesla Ends Model S and X Production and Sends $2 Billion to xAI as 2025 Revenue Declines
Starmer Seeks Economic Gains From China Visit While Navigating US Diplomatic Sensitivities
Starmer Says China Visit Will Deliver Economic Benefits as He Prepares to Meet Xi Jinping
UK Prime Minister Starmer Arrives in China to Bolster Trade and Warn Firms of Strategic Opportunities
The AI Hiring Doom Loop — Algorithmic Recruiting Filters Out Top Talent and Rewards Average or Fake Candidates
UK Banks Pledge £11 Billion Lending Package to Help Firms Expand Overseas
Suella Braverman Defects to Reform UK, Accusing Conservatives of Betrayal on Core Policies
Melania Trump Documentary Sees Limited Box Office Traction in UK Cinemas
UK’s Starmer and Trump Agree on Urgent Need to Bolster Arctic Security
Starmer Breaks Diplomatic Restraint With Firm Rebuke of Trump, Seizing Chance to Advocate for Europe
UK Finance Minister Reeves to Join Starmer on China Visit to Bolster Trade and Economic Ties
Prince Harry Says Sacrifices of NATO Forces in Afghanistan Deserve ‘Respect’ After Trump Remarks
Barron Trump Emerges as Key Remote Witness in UK Assault and Rape Trial
Trump Reverses Course and Criticises UK-Mauritius Chagos Islands Agreement
Elizabeth Hurley Tells UK Court of ‘Brutal’ Invasion of Privacy in Phone Hacking Case
UK Bond Yields Climb as Report Fuels Speculation Over Andy Burnham’s Return to Parliament
Prince William to Make Official Visit to Saudi Arabia in February
Prince Harry Breaks Down in London Court, Says UK Tabloids Have Made Meghan Markle’s Life ‘Absolute Misery’
Malin + Goetz UK Business Enters Administration, All Stores Close
EU and UK Reject Trump’s Greenland-Linked Tariff Threats and Pledge Unified Response
UK Deepfake Crackdown Puts Intense Pressure on Musk’s Grok AI After Surge in Non-Consensual Explicit Images
Prince Harry Becomes Emotional in London Court, Invokes Memory of Princess Diana in Testimony Against UK Tabloids
UK Inflation Rises Unexpectedly but Interest Rate Cuts Still Seen as Likely
Starmer Steps Back from Trump’s ‘Board of Peace’ Amid Strained US–UK Relations
Prince Harry’s Lawyer Tells UK Court Daily Mail Was Complicit in Unlawful Privacy Invasions
UK Government Approves China’s ‘Mega Embassy’ in London Amid Debate Over Security and Diplomacy
Trump Cites UK’s Chagos Islands Sovereignty Shift as Justification for Pursuing Greenland Acquisition
UK Government Weighs Australia-Style Social Media Ban for Under-Sixteens Amid Rising Concern Over Online Harm
Trump Aides Say U.S. Has Discussed Offering Asylum to British Jews Amid Growing Antisemitism Concerns
UK Seeks Diplomatic De-escalation with Trump Over Greenland Tariff Threat
Prince Harry Returns to London as High Court Trial Begins Over Alleged Illegal Tabloid Snooping
High-Speed Train Collision in Southern Spain Kills at Least Twenty-One and Injures Scores
Meghan Markle May Return to the U.K. This Summer as Security Review Advances
Trump’s Greenland Tariff Threat Sparks EU Response and Risks Deep Transatlantic Rift
Prince Harry’s High Court Battle With Daily Mail Publisher Begins in London
Trump’s Tariff Escalation Presents Complex Challenges for the UK Economy
UK Prime Minister Starmer Rebukes Trump’s Greenland Tariff Strategy as Transatlantic Tensions Rise
Prince Harry’s Last Press Case in UK Court Signals Potential Turning Point in Media and Royal Relations
OpenAI to Begin Advertising in ChatGPT in Strategic Shift to New Revenue Model
GDP Growth Remains the Most Telling Barometer of Britain’s Economic Health
Prince William and Kate Middleton Stay Away as Prince Harry Visits London Amid Lingering Rift
Britain Braces for Colder Weather and Snow Risk as Temperatures Set to Plunge
Mass Protests Erupt as UK Nears Decision on China’s ‘Mega Embassy’ in London
Prince Harry to Return to UK to Testify in High-Profile Media Trial Against Associated Newspapers
Keir Starmer Rejects Trump’s Greenland Tariff Threat as ‘Completely Wrong’
Trump to hit Europe with 10% tariffs until Greenland deal is agreed
Prince Harry Returns to UK High Court as Final Privacy Trial Against Daily Mail Publisher Begins
Britain Confronts a Billion-Pound Wind Energy Paradox Amid Grid Constraints
The graduate 'jobpocalypse': Entry-level jobs are not shrinking. They are disappearing.
Cybercrime, Inc.: When Crime Becomes an Economy. How the World Accidentally Built a Twenty-Trillion-Dollar Criminal Economy
×