Breaches and incidentsBriefReported by a reputable outlet, citing the company
Program Consultores (Argentine municipal software provider): ransomware takes down municipal servers across Cordoba and other provinces
File-encrypting malware took the provider’s server infrastructure offline, blocking payments and administrative procedures in municipalities including La...
- Disclosed
What happened
- File-encrypting malware took the provider’s server infrastructure offline, blocking payments and administrative procedures in municipalities including La Falda, Villa Giardino, La Cumbre, Valle Hermoso, Cosquin, Tanti and Villa Carlos Paz; some received demands of up to three bitcoin (La Estafeta). Konbriefing lists more than 30 affected municipalities in several provinces.
- Root cause: the company says the affected part was server infrastructure, not application security, and says it is unrelated to recently reported PHP vulnerabilities; initial access not disclosed.
- Attacker: not identified.
- Response: the company denies any data theft or leak; joint restoration with municipal IT, no timeline.
Sources
- https://laestafetaonline.com.ar/locales/hackeo-a-municipios-la-empresa-descarto-el-robo-de-datos-y-hubo-pedidos-de-rescate-en-bitcoins/
- https://konbriefing.com/en-topics/cyber-attacks-public-administration.html
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.