Colombia Confirms Ransomware at Justice Ministry

Attack confirmed in Colombia

Colombia’s Ministry of Justice and Law confirmed a ransomware attack that compromised part of its technology infrastructure and affected the availability of some digital services. The confirmation places the agency among public institutions hit by this type of campaign in the region, as authorities in other countries also report pressure on government services and critical operators.

Technical context and scope

A joint alert issued by U.S. and South Korean agencies about Gunra provided a technical frame for understanding this type of incident. That advisory said the group has targeted government services organizations and critical infrastructure. It also widened the sector focus to health care, government services, finance, and nonprofit organizations. That context matters for interpreting attributions or posts tied to public entities and local services in Latin America.

Although the available material does not identify an official attribution of the Colombian case to Gunra, it does show that campaigns like this are aimed at entities with essential services and state structures exposed to operational disruption.

Regional response

In Panama, AIG activated a Cybersecurity Operations Center to monitor attacks against public institutions. The note does not identify a specific victim, but it does reflect an official regional response to ransomware pressure on the public sector.

The combination of a confirmed case in Colombia, the technical warning about Gunra, and the measure adopted in Panama sends a clear signal about the exposure of ministries, public institutions, and local services in Latin America.