🇨🇷Costa Rica
Unknown•Ranked #14 of 198•score 10089% vs global avg·Top 7%
Ransomware
23
Top: lockbit3
Defacements
0
No defacements
Critical incidents
3
High-severity ransomware
Severity breakdown
- Crit313%
- High14%
- Med1983%
- Low00%
Ransomware activity over time
2 incidents over the last 90d
CISA KEV — globally critical
Known-exploited vulnerabilities (not country-scoped).
- CVE-2026-97229
GitLab: GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability
Added 2026-10-29
- CVE-2026-76418
Cisco: Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability
Added 2026-10-29
- CVE-2026-41709
Broadcom: Broadcom VMWare ESX Insufficient Logging Vulnerability
Added 2026-10-28
- CVE-2026-46300
Linux: Linux Kernel Missing Initialization of a Variable Vulnerability
Added 2026-10-28
- CVE-2026-48356
Adobe: Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability
Added 2026-10-27
Recent ransomware incidents in Costa Rica
| Date | Organization | Sector | Actor | Severity |
|---|---|---|---|---|
| 2026-10-15 | www.coopecaja.fi.cr | Financial Services | incransom | MEDIUM |
| 2026-09-15 | Asada Sarapiqu | Agriculture and Food Production | arcusmedia | MEDIUM |
| 2026-07-22 | Recsa | Professional Services | qilin | MEDIUM |
| 2026-06-26 | Clínica La Sabana | Healthcare | payload | MEDIUM |
| 2026-05-05 | Colegio María Inmaculada (CMI) | Education | medusalocker | HIGH |
| 2025-11-12 | latamlex (gyg.local) | Business Services | incransom | MEDIUM |
| 2025-10-08 | Grupo Serex | Transportation/Logistics | dragonforce | MEDIUM |
| 2025-08-27 | Grupo DIRIA | Hospitality and Tourism | dragonforce | MEDIUM |
| 2025-08-14 | Laboratorio Clinico Santa Rita | Healthcare | thegentlemen | MEDIUM |
| 2025-04-25 | Sisnet, Costa Rica | Technology | nightspire | MEDIUM |
Top targeted sectors
- Transportation/Logistics4
- Financial Services3
- Agriculture and Food Production3
- Business Services3
- Technology3
Threat actors active here
- lockbit33
- incransom2
- dragonforce2
- ransomhub2
- lynx2

