Hacktivist Attacks on Critical Infrastructure in Latin America: A Rising Threat

Introduction

In recent years, Latin America has witnessed a surge in cyberattacks targeting critical infrastructure, with hacktivist groups at the forefront of these operations. These attacks have disrupted essential services, including power grids, water systems, and healthcare facilities, highlighting significant vulnerabilities within the region's cybersecurity frameworks.

Surge in Cyberattacks

According to Check Point Research, in December 2025, organizations in Latin America experienced an average of 3,065 cyberattacks per week, marking a 26% increase year-over-year. This surge underscores the escalating threat landscape in the region. (blog.checkpoint.com)

Hacktivist Groups Targeting Critical Infrastructure

Hacktivist groups, motivated by political and social agendas, have been increasingly targeting critical infrastructure in Latin America. Notably, the Guacamaya group has been active in the region, conducting cyberattacks against government entities and corporations in countries such as Chile, Colombia, El Salvador, Guatemala, Mexico, and Peru. Their operations have included data breaches and the publication of sensitive information, aiming to expose perceived injustices and influence public opinion. (en.wikipedia.org)

Notable Incidents

• Costa Rican Government Systems Attack (2022): In April 2022, Costa Rican government institutions, including the Ministry of Finance and the Costa Rican Social Security Fund, were targeted by ransomware attacks attributed to the Conti and Hive groups. These attacks led to significant disruptions in public services and exposed the vulnerabilities in the country's cybersecurity infrastructure. (en.wikipedia.org)

• Brazilian Power Grid Attack (2025): In 2025, Brazil experienced a series of Distributed Denial of Service (DDoS) attacks targeting its power grid infrastructure. These attacks, attributed to hacktivist groups, aimed to disrupt energy distribution and draw attention to environmental and social issues. (tiinside.com.br)

Impact on Critical Sectors

• Power Grids: Attacks on power grids have led to widespread outages, affecting millions of residents and businesses. The 2025 DDoS attacks in Brazil serve as a prime example of how hacktivist groups can disrupt energy distribution to achieve their objectives.

• Water Systems: Cyberattacks on water treatment facilities have raised concerns about public health and safety. The manipulation of water treatment processes can lead to contamination and pose significant risks to communities.

• Healthcare: Ransomware attacks on healthcare institutions have compromised patient data and disrupted medical services. The 2022 Costa Rican attack on the Social Security Fund is a case in point, where critical health services were severely impacted.

Challenges and Recommendations

The increasing frequency and sophistication of cyberattacks in Latin America present significant challenges. Many organizations lack comprehensive cybersecurity strategies, leaving critical infrastructure vulnerable. To mitigate these risks, it is recommended that organizations:

• Enhance Cybersecurity Measures: Implement robust security protocols, conduct regular vulnerability assessments, and ensure timely patching of systems.

• Develop Incident Response Plans: Establish and regularly update incident response plans to ensure swift and effective responses to cyber incidents.

• Promote Cybersecurity Awareness: Educate employees and stakeholders about cybersecurity best practices to reduce the risk of successful attacks.

Conclusion

The rise of hacktivist attacks on critical infrastructure in Latin America underscores the need for a coordinated and proactive approach to cybersecurity. Strengthening defenses, improving response capabilities, and fostering a culture of cybersecurity awareness are essential steps to safeguard the region's critical infrastructure against evolving cyber threats.

Highlights:

• Cyber Attacks Surge in Latin America | Dec 2025, Published on Monday, January 12
• 2022 Costa Rican ransomware attack
• With Brazil leading the way in cyberattacks in Latin America, a Netscout report reveals that DDoS attacks dominate the market | TI INSIDE Online, Published on Thursday, September 04