El Salvador — Cyber Threat Profile
El Salvador's Cybersecurity and Information Security Law, in force since November 23, 2024, created the State Cybersecurity Agency (ACE). On April 30, 2025, the Legislative Assembly approved $12 million to fund the agency's start-up operations from April through December 2025, including 90 contract positions. A 2025 Inter-American Development Bank and OAS assessment, using Oxford's Cybersecurity Capacity Maturity Model, put El Salvador at the third of five maturity levels in cybersecurity education, up from the second in 2020, and at the third level in three of five aspects of incident response. ESET data published July 30, 2026 put Salvadoran ransomware up more than 30 percent on the previous period, led by finance, then government and education, with AI-based detection preventing over $12.5 million in losses in the past year.- Secure Internet servers per 1M people (2024): 191.2 (source: World Bank)
- Internet users (2024): 66.5% of population (source: World Bank)
Threat actors targeting El Salvador
Most targeted sectors
Recent claimed incidents
Read the full analysis on IntelFusions