Colombia Justice Ministry Confirms Ransomware Attack

The Ministry of Justice and Law of Colombia said on Aug. 3, 2026, that it had been hit by a ransomware attack that compromised part of its technology infrastructure and affected the availability of some of its services.

The ministry said it immediately activated its cybersecurity protocols to contain the incident. In its official statement, acting minister Cielo Rusinque strongly rejected the attack and asked the Attorney General’s Office, the National Police and other competent authorities to move quickly with the investigation, identify those responsible and bring them to justice. She also confirmed that the affected systems were isolated as a preventive measure.

In a later update, the ministry detailed which services were still affected and which continuity measures had been put in place while recovery work continued. Among the steps adopted, it set up alternate in-person service channels at the Chapinero office, the email address gestion.documental@minjusticia.gov.co and the phone line (601) 443 3100 for procedures and guidance.

The agency also said that SGDEA, the Electronic Archive Document Management System that supports filing and document management, is experiencing temporary disruptions. By contrast, the consultation website, the JustiFácil platform and the LegalApp tool continue to operate normally.

According to the official update, technical teams at the ministry are working nonstop with the Ministry of ICT and other competent authorities to restore the affected services safely. The ministry added that it will continue to inform the public about recovery progress through its official channels.

Separately, sources cited by Caracol Radio said the attack was similar to the one that recently affected Ecopetrol, although that comparison was presented as part of unconfirmed reports. In addition, the incoming justice minister, Iván Cancino, publicly said on social media that the ministry’s systems had been the target of a suspected cyberattack and called for a quick effort to verify who was responsible and what the attack’s purpose was.