The Mexican government is investigating a reported ransomware attack on its legal affairs office. The RansomHub ransomware gang claimed responsibility for the data breach. President Claudia Sheinbaum said at her morning press briefing, “Today they are going to send me a report on the supposed hacking.”
RansomHub posted a sample of apparently hacked government files on the dark web.
The gang is reportedly giving the government 10 days to pay an undisclosed sum or it will make public about 313 gigabytes of files. The targeted office, known as the presidential legal counsel, handles many of the federal government’s non-criminal legal matters. RansomHub claimed the office had government contracts, insurance, and financial information.
The sample of hacked files posted appears to be part of a government employee database with personal information. This is not the first time the office of Mexico’s presidency has suffered a hack of sensitive information.
Mexican president addresses ransomware investigation
In January, someone leaked the personal information of 263 journalists who had signed up to cover presidential activities. In that case, officials at the president’s press office later said the information appeared to have been downloaded using the password of a former employee. The Mexican government has not released an official statement on the latest attack, but emergency response teams have been mobilized to mitigate the damage and secure the affected systems.
Cybersecurity experts warn about the increasing sophistication of ransomware attacks, which often result in significant operational disruptions and financial losses for victims. Government entities are prime targets for cybercriminals due to the valuable information they hold. Experts recommend that organizations, especially government bodies, adopt comprehensive cybersecurity strategies to defend against these threats.
As cyber threats continue to evolve, it is imperative for governments worldwide to stay ahead of potential risks. Continued investment in cybersecurity infrastructure and public-private partnerships will be crucial in defending against sophisticated cyber threats.