Chile Records 33 Ransomware Cases in 2026

What did Secure Soft report about Chile?

Between January and August 2026, 33 Chilean organizations were affected by ransomware, according to Secure Soft's October cybersecurity report cited by Pisapapeles. The coverage also says the regional tally places Chile behind Brazil, Mexico and Argentina, although the note does not offer an independent verification of the dataset.

The regional comparison cited by Pisapapeles lists 158 organizations in Brazil, 98 in Mexico and 56 in Argentina, compared with 33 in Chile. That distribution is attributed to material collected in Secure Soft's report, with an intermediate reference to CronUp ATRc, but without a breakdown by sector, victim or specific campaign.

What do attackers do before encrypting?

Secure Soft identified 14 tactics organized into five stages, and La Verdad's coverage says criminals combine file encryption with data theft to demand a ransom. That sequence is presented as part of broader ransomware operations, where exfiltration accompanies the locking of systems.

The source does not link those tactics to a specific group or to any particular Chilean victim. It also does not allow them to be tied to a specific sector among the 33 organizations mentioned in Chile's tally.

What impact does the coverage describe?

Pisapapeles warns that attacks can disrupt services and expose sensitive information even when organizations manage to recover their systems. The note does not attribute that effect to any specific Chilean company, public agency or case, but presents it as a possible consequence within the ransomware incidents analyzed.

At the same time, La Verdad says file encryption no longer appears on its own, but is paired with data theft to increase pressure on the victim. In that model, access to information becomes central to the extortion, even without public details on each individual incident.