Argentina Archives

Sensitive Argentine Defense Industry Information Compromised in Ransomware Attack

March 1, 2025

A cyberattack on Fabricaciones Militares, a key state-owned company for the Argentine defense industry, has resulted in the theft of over 300 GB of sensitive data. The compromised data includes plans for cutting-edge weapons projects. Negotiations are reportedly underway to recover the stolen information. The cyberattack was first reported by specialized publications FalconFeeds.io and Cyber Press, who identified it as a ransomware attack claimed by the “MONTI” group.

Fabricaciones Militares holds a crucial position in Argentina’s defense sector, as it oversees the Villa María Military Powder and Explosives Factory. The company’s current transition and the government’s privatization plans have created a delicate situation, especially considering the sensitive nature of the stolen data.

Cyberattack Affects > 18,000 Workstations at Telecom Argentina.

July 18, 2024

On July 18, top Argentinian telecom provider Telecom Argentina announced that it was the target of a ransomware attack. The effects of the attack were first noticed when the Telecom’s employees started facing issues and lag in their systems while accessing the company’s VPN (virtual private network). The internal security systems instantly set-off the alarms but not before the ransomware was installed in over 18,000 workstations.

The attackers demanded nearly $7.5 million, threatening to raise the ransom to $15 million if they weren’t compensated within three days. Telecom Argentina confirmed that none of its dependent services were affected.

Hackers Steal 20 Million Pesos from Municipality in Argentina

April 19, 2024

The San Agustín Commune suffered a cyber attack in which 20 million pesos were stolen from its central account. The thieves stole the money on Friday through four different transfers of $4.9 million pesos each. “They wanted to do two more operations, but there was no more money,” he confirmed.

The main concern is the recovery of the money intended for paying suppliers and salaries. If the illegally stolen funds are not recovered, the municipality will face financial difficulties that could affect the payment of salaries, the execution of works and the provision of services planned for the well-being of our citizens.

Globant IT and Software Consultancy Stolen Data Leaked by Lapsus$ Extortion Group

March 29, 2022

IT and software consultancy firm Globant confirmed a data breach by the Lapsus$ data extortion group. Stolen data, consisting of administrator credentials and source code, was leaked by the threat actors. The hacking group released a 70GB archive describing it as “some customers source code.”

Court of Córdoba’s Infrastructure in Argentina Hit by PLAY Ransomware Attack

August 13, 2022

Argentina’s Judiciary of Córdoba has shut down its IT systems after suffering a ransomware attack. The attack was reportedly at the hands of the new ‘Play’ ransomware operation and caused the Judiciary to shut down IT systems and their online portal. The outage is also forcing the use of pen and paper for submitting official documents.

The Judiciary confirmed that it was engaged with Microsoft, Cisco, Trend Micro, and local specialists to investigate the attack.