Uruguay — Cyber Threat Profile

Uruguay recorded 14,264 cybersecurity incidents in 2024, a 65% increase from 2023, with CERTuy logging one attack every 30 minutes. Ransomware groups including LockBit, Play, Akira, and Mydata successfully targeted prominent organizations including a major law firm that paid a ransom. A ransomware attack on Paysandu City Hall encrypted institutional information and demanded USD 650,000. An estimated 948,850 internet users were victims of fraud attempts in 2024. Despite this, 152,220 registered organizations have never conducted a cybersecurity assessment, 85% of companies lack formal security policies, and 60% offer no employee training.

National CERT/CSIRT: CERTuy
Data protection authority: Unidad Reguladora y de Control de Datos Personales (URCDP) (source: CNIL)
Secure Internet servers per 1M people (2024): 4,640.7 (source: World Bank)
Internet users (2024): 92.0% of population (source: World Bank)

Read the full analysis on IntelFusions