Peru government denies ransomware attack, despite hacker claims

Skip to main content
Tech Radar Pro
Tech Radar Gaming
Tech Radar Pro
TechRadar the business technology experts
Search TechRadar
View Profile
België (Nederlands)
Deutschland
North America
US (English)
Australasia
New Zealand
Expert Insights
Website builders
Web hosting
World Password Day
Best website builder
Best web hosting
Best office chairs
Expert Insights
Peru government denies ransomware attack, despite hacker claims
Sead Fadilpašić
Rhysida operators claim they broke into a government portal and stole data
When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works.
(Image credit: Shutterstock / Who is Danny)
Operators of the Rhysida ransomware add Peruvian government to their data leak site
Hackers claim to have stolen sensitive files and are demanding five bitcoin
The government says it hasn't been targeted and that it operates normally
Infamous hacking group Rhysida has claimed it breached the digital platform of the Peruvian government, but the South American country denies any ransomware incidents.
The cybercriminals added the Peruvian government to their data leak site, including some documents allegedly stolen from the portal, noting they also demanded a five bitcoin ransom, which equals roughly $471,000.
This prompted Peru’s Ministry of Government and Digital Transformation to publish a statement and deny any hostile takeover of its digital assets.
You may like
China government-linked hackers caught running a seriously dangerous ransomware scam
Southern Water denies claims it offered $750,000 ransom to ransomware hackers
Port of Seattle ransomware breach exposes data on around 90,000 people
Get Keeper Personal for just $1.67/month, Keeper Family for just $3.54/month, and Keeper Business for just $7/month
​Keeper is a cybersecurity platform primarily known for its password manager and digital vault, designed to help individuals, families, and businesses securely store and manage passwords, sensitive files, and other private data.
It uses zero-knowledge encryption and offers features like two-factor authentication, dark web monitoring, secure file storage, and breach alerts to protect against cyber threats.
Preferred partner (What does this mean?)
Tax admin was struck
“The Single Digital Platform of the Peruvian State, has not been compromised or breached. All its services remain operational and functioning normally,” the government said in a statement published on Facebook.
“The posts circulating on social media suggesting a supposed hijacking of the domain are inaccurate,” it stressed, but added that an attack has, indeed, taken place recently.
“The incident in question is related to a service associated with the domain which is not administered by the PCM (Presidency of the Council of Ministers) or the Secretariat of Government and Digital Transformation.”
This, according to The Record, is the tax administration website of regional capital Piura.
Are you a pro? Subscribe to our newsletter
Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!
Contact me with news and offers from other Future brandsReceive email from us on behalf of our trusted partners or sponsorsBy submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.
This government entity also released a statement, confirming a cyberattack in late March 2025. It disrupted its operations briefly, but they were restored within 48 hours. Allegedly, no files were stolen in this attack.
“As soon as we became aware of the possible security event, the National Center for Digital Security (CNSD) immediately activated preventive alerts to mitigate any potential risk,” the notice continues.
“Currently, investigation and analysis efforts are being carried out in coordination with relevant entities, both nationally and internationally. Additionally, direct collaboration is underway with the institution allegedly affected to clarify the facts and determine the extent of the incident.”
You might also like
Ransomware gangs allegedly hit two major US healthcare firms, 300,000 patients have data stolen
Take a look at our guide to the best authenticator app
We've rounded up the best password managers
Sead Fadilpašić
Social Links Navigation
Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.
You must confirm your public display name before commenting
Please logout and then login again, you will then be prompted to enter your display name.
China government-linked hackers caught running a seriously dangerous ransomware scam
Southern Water denies claims it offered $750,000 ransom to ransomware hackers
Port of Seattle ransomware breach exposes data on around 90,000 people
8base ransomware site taken down in global police operation
Ransomware attacks are costing Government offices a month of downtime on average
More reports claim 2024 was the worst year for ransomware attacks yet
Latest in Security
Top ticket resale platform hit by data breach - over 500,000 customer records leaked online
IPv6 networking feature hit by hackers to hijack software updates
Hundreds of top ecommerce sites under attack following Magento supply chain flaw
Gmail servers hijacked by malicious PyPI packages to spread havoc - here's how to stay safe
'ILOVEYOU': The virus that rocked the world, 25 years on
WordPress sites targeted by malicious plugin disguised as security tool
Latest in News
Windows 11 could soon get a nifty new privacy feature that tells you when people are sneakily looking at your laptop screen
Google just accidentally leaked the next major visual redesign for Android – here's what it looks like
Switching from Android to an iPhone just got much easier thanks to this handy update
Microsoft has a great deal on Windows 365 - which runs out just in time for Windows 10 end of life
Apple’s foldable iPhone is tipped to beat the Samsung Galaxy Z Fold in two key ways
UNA Watch celebrates $330,000 in Kickstarter backing as consumers and developers clamor for a sustainable alternative to the Apple Watch
LATEST ARTICLES
Roku users say the latest software update has made their streaming suck
Windows 11 could soon get a nifty new privacy feature that tells you when people are sneakily looking at your laptop screen
Google just accidentally leaked the next major visual redesign for Android – here's what it looks like
Adorama's Big Nikon Spring Sale includes record-low prices on the Z6 III, Zf, and Z8.
Ninja's best coffee maker just got an upgrade to make brewing the perfect espresso even easier
TechRadar is part of Future US Inc, an international media group and leading digital publisher. Visit our corporate site.
Contact Future's experts
Terms and conditions
Privacy policy
Cookies policy
Advertise with us
Web notifications
Accessibility Statement
Future US, Inc. Full 7th Floor, 130 West 42nd Street,
Please login or signup to comment
Please wait...