Cyber Incident Victim: Argentina de Soluciones Satelitales
Date:
Nov 2022
Location:
Argentina
Summary
The telecommunications service provider Argentina de Soluciones Satelitales (ARSAT) experienced a cyberattack targeting its internal corporate systems, with no reported impact on customer data or services. The incident occurred hours before a key World Cup match involving Argentina, prompting heightened security measures including a system-wide shutdown to contain the breach. Initial intrusion attempts were detected prior to another national team match, though hackers unsuccessfully targeted administrative systems rather than satellite infrastructure. While authorities speculated about potential Russian involvement, no threat actor claimed responsibility and no ransom demands were publicly disclosed. The state-owned company maintained critical operations for military telecommunications, Antarctic base connectivity, and national broadcast services throughout the incident.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On November 29, 2022, Argentina de Soluciones Satelitales (ARSAT), a state-owned telecommunications and satellite services provider, experienced a cyberattack targeting its corporate systems. The incident began at approximately 21:00 local time, with internal security alarms activating at 05:00 the following morning (November 30). Initial investigations revealed that attackers attempted to breach administrative corporate systems rather than satellite infrastructure. ARSAT confirmed the attack via Twitter on November 30, stating the compromise affected only internal corporate systems while emphasizing no customer data or external services were impacted. The company immediately implemented preventive procedures to contain the intrusion, including a complete system shutdown during the early hours of November 30 to halt further attacker progression.
This incident occurred hours before Argentina’s World Cup match against Poland on November 30, raising concerns about potential disruptions to national telecommunications services. ARSAT’s infrastructure supports critical functions including terrestrial/aerial data transmission, television broadcasts, military teleport services, and Antarctic base communications. Authorities acknowledged an earlier intrusion attempt preceding Argentina’s November 26 match against Mexico, prompting heightened monitoring ahead of the December 3 Australia match. No threat actor claimed responsibility, though unnamed officials speculated about possible Russian hacker involvement without providing evidence. ARSAT maintained public assurances regarding data integrity and service continuity throughout the incident, with no subsequent reports of operational disruptions or data leaks. Internal investigations continued to assess attack vectors and reinforce security measures.