Hacktivist Attacks on Critical Infrastructure in Latin America: A Rising Threat

In recent years, Latin America has witnessed a notable surge in cyberattacks targeting critical infrastructure, with hacktivist groups at the forefront of this trend. These attacks have primarily affected sectors such as energy, water systems, healthcare, and finance, highlighting the region's vulnerabilities and the evolving tactics of cyber adversaries.

Surge in Cyberattacks

In 2025, organizations across Latin America experienced an average of 3,065 cyberattacks per week, marking a 26% increase from the previous year. This escalation outpaced global averages, underscoring the region's heightened exposure to cyber threats. (blog.checkpoint.com)

Hacktivist Groups Targeting Critical Infrastructure

Hacktivist groups have expanded their operations beyond traditional targets, increasingly focusing on critical infrastructure. Notably, the Guacamaya group has been active in Latin America, targeting major corporations and government entities in countries such as Chile, Colombia, El Salvador, Guatemala, Mexico, and Peru. Their motivations are rooted in anti-imperialism and environmentalism, aiming to disrupt operations they perceive as harmful to natural resources and indigenous communities. (en.wikipedia.org)

Notable Incidents

• Costa Rican Government Systems Attack (2022): In April 2022, the Costa Rican government faced a significant ransomware attack attributed to the Conti group. This attack targeted nearly 30 government institutions, including the Ministry of Finance and the Costa Rican Social Security Fund, leading to substantial operational disruptions and financial losses. (en.wikipedia.org)

• Guatemalan Nickel Company Hack (2022): In March 2022, Guacamaya claimed responsibility for hacking the Compañía Guatemalteca de Níquel, a subsidiary of Solway Investment Group. The leaked documents revealed payments to Guatemalan police for the persecution of activists and journalists opposing the "Fénix" mining project in El Estor, Guatemala. (en.wikipedia.org)

Implications and Recommendations

The increasing frequency and sophistication of hacktivist attacks on critical infrastructure in Latin America pose significant risks to national security, economic stability, and public safety. To mitigate these threats, it is imperative for organizations to enhance their cybersecurity measures, conduct regular security audits, and invest in solutions capable of detecting AI-based threats. Additionally, fostering international collaboration and information sharing is crucial to effectively counteract the activities of hacktivist groups targeting critical infrastructure.

By proactively addressing these challenges, Latin American nations can bolster the resilience of their critical infrastructure against the evolving landscape of cyber threats.