
Retail, E-commerce and Consumer Goods, July 2026
July brought ransomware, fraud, and extortion to LATAM retail and consumer goods, with a focus on Brazil, Argentina
Whalemate Labs is the research desk behind CiberLATAM news and analysis. It runs AI-assisted research agents that track CERTs, vendor advisories, regulators and specialist media across Latin America. Every story publishes automatically, but only after its cited URLs are checked over HTTP and the story is corroborated by at least two distinct outlets, or by one verifiable official source. Anything that fails those checks is not published. Corrections to published stories are always made by a human editor.
The Central Bank of Brazil adds 24-hour holds for certain crypto transfers and rolls out new security rules for Pix.
Aug 21, 2026 · 3 min
Paraguay’s Chamber of Deputies held a hearing on the cybersecurity bill as DNIT activated a new crypto asset filing and banks updated prevention.
Aug 21, 2026 · 1 min
Chile’s CMF kept ARC in force, data law 21.719 took effect, and authorities launched a national anti-fraud board.
Aug 21, 2026 · 2 min
Threat reports place Colombia among recent ransomware victims, while F5 and Security Arsenal also flagged related activity.
Aug 21, 2026 · 3 min
ransomware.live lists 83 Peru-linked victims, without attribution to any group. VECERT also reported unconfirmed activity.
Aug 21, 2026 · 2 min
Kaspersky attributed The Gentlemen attacks to manufacturing, healthcare, technology, finance, construction
Aug 21, 2026 · 2 min
Brazil’s Senate filed a bill on older adults’ digital inclusion and the ANPD prioritized the ECA Digital and platform decrees.
Aug 21, 2026 · 3 min
A Colombian Senate bill would create a national earthquake alert system for phones, radio and TV, with a six-month deadline.
Aug 21, 2026 · 3 min
El Peruano says Peru still has no general cybersecurity law. Data protection rules do apply, with a new regulation in force since March 2025.
Aug 21, 2026 · 2 min
Paraguay’s Senate and Deputies advanced cyberbullying and cybersecurity bills, while the data protection law will not take effect until 2027.
Aug 21, 2026 · 3 min
The Senate advanced a company law reform that would require a human or legal responsible party for automated structures
Aug 21, 2026 · 3 min
Brazil approved changes on AI data use, while Chile keeps its algorithmic governance bill moving with a focus on transparency.
Aug 21, 2026 · 3 min
Ransomware.live and Breachsense list mecasem.org as a 3AM victim. GalaxyWarden says there is no public confirmation from the company.
Aug 21, 2026 · 2 min
INCIBE-CERT issued alerts on PLCnext, Red Hat Quay, and OpenShift components, including one critical flaw with no active exploitation seen.
Aug 20, 2026 · 2 min
Mexico updated anti-money-laundering rules and the CNBV expanded biometric checks at banks, raising compliance and traceability demands.
Aug 20, 2026 · 4 min
Peru is raising cybersecurity, data, and AI governance requirements for banks, with stricter supervision than Argentina
Aug 20, 2026 · 4 min
Chile’s CMF reported five entities for alleged fraud as authorities launched new anti-fraud coordination and moved on stablecoin rules.
Aug 20, 2026 · 3 min
Brazil’s ANPD is revising sanction rules and stepping up enforcement in 2026, with action on facial recognition
Aug 20, 2026 · 3 min
Peru's SBS opened a consultation on AFP contribution payments and updated prudential and accounting rules for EAFs, with cybersecurity requirements.
Aug 19, 2026 · 3 min
BCP, DNIT and lawmakers moved on securities, cryptoassets and cybersecurity, while ueno again stood out for software spending.
Aug 19, 2026 · 4 min
Chile’s CMF and Central Bank move on outsourcing, risk, stablecoins and data protection, with new compliance pressure for finance firms.
Aug 19, 2026 · 2 min
Argentina updates minimum capital and market risk rules, while Mexico expands biometric validation and cybersecurity controls for banks.
Aug 19, 2026 · 4 min
Security Arsenal tracked new U.S. victims from DIREWOLF, COINBASECARTEL and XPL0ITRS across health, tech and professional services.
Aug 19, 2026 · 2 min
Uruguay is weighing a ban on social media accounts for under-15s and stricter platform age checks, alongside new online gaming rules.
Aug 19, 2026 · 4 min

July brought ransomware, fraud, and extortion to LATAM retail and consumer goods, with a focus on Brazil, Argentina

Ecopetrol drove LATAM this month, with data exfiltration, extortion, and regulatory response; actively exploited CVEs also added pressure.

July saw leaks, operational stoppages from failures, and ransomware, led by Colombia and Mexico, alongside a rise in active vulnerabilities.

July closed with more regulation, less fraud, and more availability incidents and leaks in public agencies across the region.

July ended with cloud and SaaS intrusions, critical Citrix and Ivanti alerts, and Ecopetrol as the region's most sensitive case.

July saw fiber outages, incidents at Copaco and Ecopetrol, telecom fraud, and strong ransomware pressure across the region.

Ransomware, disputed leaks, and sanctions shaped July in LATAM health, with Brazil and Sinaloa at the center.

Ransomware and data leaks marked July in Latin American utilities, with Ecopetrol, Oldelval, and Sinop Energia at the center.

July brought regulatory pressure in Peru and Brazil, plus 40 vulnerability events and an operational incident at Caixa lotteries.

July ended with more regulation, persistent digital fraud, and signs of ransomware and phishing affecting banking and insurance across the region.

July closed with Redis, SharePoint, OpenSSH, Ivanti, and Joomla/JCE in focus, plus confirmed active exploitation and regional CERT alerts.

July ended with heavy ransomware pressure in LATAM, led by Brazil and Argentina and with new confirmed cases in Bolivia.