Costa Rica refinery cyberattack was first deployment for new US response program, ambassador says

Summary: A significant ransomware attack on Costa Rica’s largest oil refinery tested the U.S. State Department’s new rapid response tool, FALCON, designed to assist allies in cybersecurity crises. The U.S. provided swift support, deploying a team to help restore systems and investigate the attack, attributed to the RansomHub group. This incident highlights the growing cybersecurity threats faced by Costa Rica and the strategic partnership with the U.S. in addressing these challenges.

Threat Actor: RansomHub | RansomHub
Victim: Refinadora Costarricense de Petróleo (RECOPE) | Refinadora Costarricense de Petróleo

Keypoints :

• The ransomware attack occurred just before Thanksgiving, impacting RECOPE’s operations significantly.
• The U.S. response included deploying a team within 36 hours to assist in remediation and recovery efforts.
• FALCON aims to enhance international cybersecurity collaboration and has prompted interest from other Latin American nations in improving their defenses.