Chile ANCI logs 566 incidents in 2026
Chile’s cybersecurity agency logged 566 significant incident reports from January 1 to October 15, 2026, far above 2025’s 213.
Chile’s National Cybersecurity Agency received 566 reports of significant-effect incidents between January 1 and October 15, 2026, according to BioBioChile, which attributes the figure to ANCI. In all of 2025, the agency had recorded 213 cases. Chile’s Cybersecurity Framework Law requires essential services, including banks, to report under strict deadlines.
Chile’s National Cybersecurity Agency received 566 reports of significant-effect incidents between January 1 and October 15, 2026, according to BioBioChile, which attributes the figure to ANCI. In all of 2025, the agency had logged 213. Chile’s Cybersecurity Framework Law requires essential services, including banks, to file reports in three stages and within tight deadlines.
What does the Cybersecurity Framework Law require reporting?
The law requires essential services to send an early alert within three hours, an update within 72 hours, and a final report within 15 days when a significant-effect incident occurs. BioBioChile included banking among the sectors covered, noting that it also falls under that notification scheme.
That framework comes amid the rise in reports disclosed by ANCI itself. The jump between 2025 and the first months of 2026 left the agency with more than twice as many incidents reported in the comparable period, according to BioBioChile’s figure.
What is known about banking and the reporting pace?
BioBioChile said banking stayed at around seven reports across the periods compared, although the available excerpt does not provide an exact breakdown or an independent official confirmation. In other words, the figure appears in the coverage, but the material available does not include additional verification.
Provectis added, based on an ANCI letter obtained by BioBioChile, that the 566 reports would equal an average of nearly 60 per month, compared with about 21 in 2025. It also said that between July and mid-October the pace would have been around 70 reports per month. That wording rests on the same indirect attribution, without independent official corroboration in the material provided.
| Data | Value | Source or agency |
|---|---|---|
| Significant incident reports in 2026, between January 1 and October 15 | 566 | ANCI, according to BioBioChile |
| Reports during all of 2025 | 213 | ANCI, according to BioBioChile |
| Early alert deadline | 3 hours | Cybersecurity Framework Law |
| Update deadline | 72 hours | Cybersecurity Framework Law |
| Final report deadline | 15 days | Cybersecurity Framework Law |
| Estimated monthly average in 2026 | About 60 | Provectis, based on an ANCI letter obtained by BioBioChile |
| Estimated monthly average in 2025 | About 21 | Provectis, based on an ANCI letter obtained by BioBioChile |
What is happening with the delay to Law 21,719?
Bulletin No. 18.623-07 proposes moving the effective date of Law No. 21,719 from December 1, 2026 to October 15, 2027. After Senate approval, the measure was still in its second constitutional review in the Chamber of Deputies and had not yet become law.
The Chamber’s Constitution Committee approved the bill in general by unanimous vote, and the proposal was then due to move on to the Finance Committee, according to IAPP. The available material also points to a Diario Constitucional analysis of the delay, but the operational fact confirmed in this set is the legislative status reported by IAPP.
Sources
- Servicios esenciales bajo ciberataque: organismos han reportado 566 incidentes significativos en 2026biobiochile.cl· BioBioChile
- El probable cambio de fecha de entrada en vigor de la Ley de Datos Personales en Chile: ¿y ahora qué se hace?iapp.org· IAPP
- Reportes de incidentes graves a la ANCI suben 166% en 2026provectis.cl· Provectis



