CiberLATAMbywhalemate

Chile ANCI logs 566 incidents in 2026

Chile’s cybersecurity agency logged 566 significant incident reports from January 1 to October 15, 2026, far above 2025’s 213.

Whalemate Labs · AI-assisted researchPublished:2 min read

Chile’s National Cybersecurity Agency received 566 reports of significant-effect incidents between January 1 and October 15, 2026, according to BioBioChile, which attributes the figure to ANCI. In all of 2025, the agency had recorded 213 cases. Chile’s Cybersecurity Framework Law requires essential services, including banks, to report under strict deadlines.

Chile’s National Cybersecurity Agency received 566 reports of significant-effect incidents between January 1 and October 15, 2026, according to BioBioChile, which attributes the figure to ANCI. In all of 2025, the agency had logged 213. Chile’s Cybersecurity Framework Law requires essential services, including banks, to file reports in three stages and within tight deadlines.

What does the Cybersecurity Framework Law require reporting?

The law requires essential services to send an early alert within three hours, an update within 72 hours, and a final report within 15 days when a significant-effect incident occurs. BioBioChile included banking among the sectors covered, noting that it also falls under that notification scheme.

That framework comes amid the rise in reports disclosed by ANCI itself. The jump between 2025 and the first months of 2026 left the agency with more than twice as many incidents reported in the comparable period, according to BioBioChile’s figure.

What is known about banking and the reporting pace?

BioBioChile said banking stayed at around seven reports across the periods compared, although the available excerpt does not provide an exact breakdown or an independent official confirmation. In other words, the figure appears in the coverage, but the material available does not include additional verification.

Provectis added, based on an ANCI letter obtained by BioBioChile, that the 566 reports would equal an average of nearly 60 per month, compared with about 21 in 2025. It also said that between July and mid-October the pace would have been around 70 reports per month. That wording rests on the same indirect attribution, without independent official corroboration in the material provided.

Data Value Source or agency
Significant incident reports in 2026, between January 1 and October 15 566 ANCI, according to BioBioChile
Reports during all of 2025 213 ANCI, according to BioBioChile
Early alert deadline 3 hours Cybersecurity Framework Law
Update deadline 72 hours Cybersecurity Framework Law
Final report deadline 15 days Cybersecurity Framework Law
Estimated monthly average in 2026 About 60 Provectis, based on an ANCI letter obtained by BioBioChile
Estimated monthly average in 2025 About 21 Provectis, based on an ANCI letter obtained by BioBioChile

What is happening with the delay to Law 21,719?

Bulletin No. 18.623-07 proposes moving the effective date of Law No. 21,719 from December 1, 2026 to October 15, 2027. After Senate approval, the measure was still in its second constitutional review in the Chamber of Deputies and had not yet become law.

The Chamber’s Constitution Committee approved the bill in general by unanimous vote, and the proposal was then due to move on to the Finance Committee, according to IAPP. The available material also points to a Diario Constitucional analysis of the delay, but the operational fact confirmed in this set is the legislative status reported by IAPP.

Sources

View all