Nation-State Cyber Threats to Latin America's Critical Infrastructure

Introduction

In early 2026, Latin America has witnessed a significant surge in cyberattacks targeting critical infrastructure sectors, including power grids, water systems, industrial control systems (ICS), healthcare, and the financial sector. These incidents highlight the region's increasing exposure to cyber threats, particularly from nation-state actors.

Recent Incidents

• Chile's 2025 Blackout: On February 25, 2025, a nationwide power outage affected over 90% of Chile's population. The disruption was attributed to a malfunction in electronic and software protection systems, leading to the disconnection of a critical 500 kV high-voltage transmission line. While the official investigation did not confirm cyber involvement, the incident raised concerns about the resilience of Chile's power grid against potential cyber threats. (en.wikipedia.org)

• Paraguay's 2025 Ransomware Attack: In June 2025, the hacker group Brigada Cyber PC claimed responsibility for a ransomware attack on multiple Paraguayan government agencies, demanding a ransom of approximately $7.4 million. The government denied paying the ransom, and the data was subsequently leaked online. This incident underscores the vulnerability of governmental institutions in the region to cyber extortion tactics. (en.wikipedia.org)

Emerging Threats

The Latin American cyber threat landscape is evolving, with nation-state actors increasingly targeting critical infrastructure:

• China-Nexus Adversaries: CrowdStrike's 2025 Latin America Threat Landscape Report highlights a rise in cyber operations attributed to China-nexus adversaries targeting government agencies, telecommunications, and military entities across the region. These activities indicate a strategic interest in Latin America's critical infrastructure by state-sponsored actors. (crowdstrike.com)

• Ransomware Surge: December 2025 saw a 26% year-over-year increase in cyberattacks in Latin America, with organizations facing an average of 3,065 attacks per week. This surge is driven primarily by ransomware operations, affecting sectors such as healthcare, communications, government, and military. (blog.checkpoint.com)

Sector-Specific Vulnerabilities

• Healthcare: The healthcare sector remains a prime target for cyberattacks, with incidents leading to data breaches and operational disruptions. The sector's reliance on interconnected systems makes it particularly susceptible to cyber threats.

• Financial Sector: Financial institutions in Latin America have experienced increased cyber activity, including data breaches and service disruptions. The sector's critical role in the economy makes it a high-value target for cyber actors.

Conclusion

The recent cyber incidents in Latin America underscore the region's vulnerabilities to cyber threats, particularly from nation-state actors targeting critical infrastructure. The evolving threat landscape necessitates enhanced cybersecurity measures, international collaboration, and a proactive approach to safeguard critical infrastructure against future cyberattacks.

Highlights:

• Iranian-backed hackers go to work after US strikes, Published on Tuesday, June 24