Several Costa Rican government websites suffered after its computer systems were targeted in a ransomware attack by the Conti gang.
The Finance Ministry was the first to notice the disruptions after a number of the county's systems were affected from tax collection to importation and exportation processes through the customs agency.
The Conti gang also targeted the social security agency’s human resources system and on the Labor Ministry.
The gang demanded a ransom of about $10 million but the County refused to pay them anything.
After the County declined the ransom the attackers intensified the attacks and started encrypting government files to freeze agencies’ ability to function and posting stolen files to the group’s extortion sites on the dark web.
TPRM report: https://www.rankiteo.com/company/ministerio-de-salud-de-costa-rica
"id": "min223923522",
"linkid": "ministerio-de-salud-de-costa-rica",
"type": "Ransomware",
"date": "6/2017",
"severity": "100",
"impact": "6",
"explanation": "Attack threatening the economy of a geographical region"{'affected_entities': [{'industry': 'Public Sector',
'location': 'Costa Rica',
'name': 'Costa Rican Government',
'type': 'Government'}],
'data_breach': {'data_encryption': True,
'data_exfiltration': True,
'type_of_data_compromised': ['Tax collection data',
'Importation and exportation '
'processes data',
'Social security agency’s human '
'resources data',
'Labor Ministry data']},
'description': 'Several Costa Rican government websites suffered after its '
'computer systems were targeted in a ransomware attack by the '
'Conti gang. The Finance Ministry was the first to notice the '
"disruptions after a number of the county's systems were "
'affected from tax collection to importation and exportation '
'processes through the customs agency. The Conti gang also '
'targeted the social security agency’s human resources system '
'and the Labor Ministry. The gang demanded a ransom of about '
'$10 million but the country refused to pay them anything. '
'After the country declined the ransom the attackers '
'intensified the attacks and started encrypting government '
'files to freeze agencies’ ability to function and posting '
'stolen files to the group’s extortion sites on the dark web.',
'impact': {'data_compromised': ['Tax collection data',
'Importation and exportation processes data',
'Social security agency’s human resources '
'data',
'Labor Ministry data'],
'operational_impact': 'Disruption of tax collection, importation, '
'exportation processes, and human resources '
'systems',
'systems_affected': ['Finance Ministry systems',
'Customs agency systems',
'Social security agency’s human resources '
'system',
'Labor Ministry systems']},
'initial_access_broker': {'data_sold_on_dark_web': True},
'motivation': 'Financial Gain',
'ransomware': {'data_encryption': True,
'data_exfiltration': True,
'ransom_demanded': '$10 million',
'ransom_paid': 'None',
'ransomware_strain': 'Conti'},
'threat_actor': 'Conti Gang',
'title': 'Ransomware Attack on Costa Rican Government Systems',
'type': 'Ransomware Attack'}