El Salvador — Cyber Threat Profile
El Salvador passed comprehensive Cybersecurity and Information Security Law (Decree 143) and a Personal Data Protection Law (Decree 144) in November 2024, entering into force the same month. These laws were prompted in part by a cascade of major 2024 incidents: in April, hacker group CiberInteligenciaSV leaked personal data of 5.1 million Salvadorans, then exposed source code and VPN credentials from the state-run Bitcoin wallet Chivo. Additional breaches hit vehicle registration databases and the Attorney General's office.- Secure Internet servers per 1M people (2024): 191.2 (source: World Bank)
- Internet users (2024): 66.5% of population (source: World Bank)
Threat actors targeting El Salvador
- RansomHub Ransomware · 4 incident(s)
- SafePay Ransomware · 2 incident(s)
- Hunters International Ransomware · 1 incident(s)
- INC Ransom Ransomware · 1 incident(s)
- Qilin Ransomware · 1 incident(s)
- Rhysida Ransomware · 1 incident(s)
Most targeted sectors
- Financial Services 2 incident(s)
- Agriculture & Food 1 incident(s)
- Education & Research 1 incident(s)
- Energy & Utilities 1 incident(s)
- Government & Public Sector 1 incident(s)
- Manufacturing 1 incident(s)
- Technology 1 incident(s)
- Transportation & Logistics 1 incident(s)
Recent claimed incidents
- DILOSA FOOD COMPANIES 2025-10-29 · Agriculture and Food Production
- DelCampo 2025-07-23
- termopuerto.com 2025-01-15 · Transportation/Logistics
- itca.edu.sv 2024-12-25 · Education
- R Pac Central America S.A. de C.V. 2024-11-27 · Manufacturing
- CENERGICA 2024-11-07 · Energy
- www.constelacion.com.sv 2024-06-04 · Technology
- Constelacion Savings and Credit Society 2024-04-24 · Financial
- Ministerio de Desarrollo Local 2024-04-23 · Government
- Constelacion Savings and Credit Society 2024-04-04 · Financial