Costa Rica
CRRansomware victim intelligence profile ยท Ranked #66 globally ยท Updated: May 24, 2026
Ransomware Threat Profile: Costa Rica
Costa Rica ranks #66 globally for ransomware attacks, with 15 confirmed victims in this database โ representing 0.1% of the worldwide total. The most active ransomware groups targeting Costa Rica include Dragonforce, Ransomhub, Lynx.
The most frequently targeted industries in Costa Rica are Transportation/Logistics, Business Services, Energy. The healthcare sector is particularly vulnerable because attacks on hospitals and medical providers can create life-threatening situations, increasing pressure to pay ransoms quickly.
Costa Rica's attack volume reflects broader trends in ransomware targeting: the volume of attacks reflects the country's integration into the global economy and the proliferation of ransomware operations that target organisations of all sizes worldwide.
Organisations in Costa Rica should consider the active threat groups documented here when assessing their cybersecurity posture, implementing detection rules, and prioritising incident response planning.
Recent Victims in Costa Rica (15 cached of 15 total)
| # | Organization | Group | Sector | Date |
|---|---|---|---|---|
| 1 | Colegio Marรญa Inmaculada (CMI) | Medusalocker | Education | May 5, 2026 |
| 2 | latamlex (gyg.local) | Incransom | Business Services | Nov 12, 2025 |
| 3 | Grupo Serex | Dragonforce | Transportation/Logistics | Oct 8, 2025 |
| 4 | Laboratorio Clinico Santa Rita | Thegentlemen | Healthcare | Sep 9, 2025 |
| 5 | Grupo DIRIA | Dragonforce | Hospitality and Tourism | Aug 27, 2025 |
| 6 | enersolcr.com | Stormous | Energy | May 2, 2025 |
| 7 | Sisnet, Costa Rica | Nightspire | Technology | Apr 26, 2025 |
| 8 | www.confabca.com | Ransomhub | Business Services | Feb 25, 2025 |
| 9 | recope.go.cr | Ransomhub | Energy | Dec 12, 2024 |
| 10 | ctsjo.com | Funksec | Transportation/Logistics | Dec 5, 2024 |
| 11 | Grupo Trisan | Lynx | Agriculture and Food Production | Nov 17, 2024 |
| 12 | Grupo_Trisan | Lynx | Agriculture and Food Production | Nov 16, 2024 |
| 13 | cosimti.com | Darkvault | Technology | Jun 17, 2024 |
| 14 | sislocar.com | Lockbit3 | Transportation/Logistics | May 9, 2024 |
| 15 | Banco Promerica | Snatch | Financial Services | Jan 13, 2024 |
Frequently Asked Questions
How many ransomware attacks have occurred in Costa Rica?
Costa Rica has recorded 15 ransomware victim disclosures in this database, ranking #66 globally. This represents 0.1% of all tracked ransomware attacks worldwide.
Which ransomware groups target Costa Rica?
The ransomware groups most active in Costa Rica are Dragonforce, Ransomhub, Lynx, Medusalocker. These groups collectively account for the majority of victim disclosures attributed to Costa Rica.
Which industries are most targeted by ransomware in Costa Rica?
In Costa Rica, the most frequently targeted sectors are Transportation/Logistics, Business Services, Energy. These industries hold valuable data and often have critical operational requirements that make them attractive ransomware targets.
How does Costa Rica rank globally for ransomware attacks?
Costa Rica ranks #66 globally for ransomware attacks with 15 victim disclosures, representing 0.1% of the worldwide total of 18,042 tracked victims.
How can organisations in Costa Rica protect against ransomware?
Organisations in Costa Rica should implement a layered security approach including regular offline backups, network segmentation, multi-factor authentication, endpoint detection and response (EDR) tools, and employee security awareness training. Monitoring threat intelligence feeds for active groups targeting Costa Rica is also recommended.