Cyber Incident Victim: Dirección General de Migración y Extranjería
Date:
Nov 2024
Location:
Costa Rica
Summary
A cyber attack targeted Costa Rica's immigration authority, prompting the suspension of its official website to safeguard systems and user data. The prolonged outage disrupted online services including appointment scheduling, document requirement checks, and immigration file monitoring, though core functions like passport processing, border controls, and DIMEX data systems remained operational. Alternative appointment channels were established via call centers, a national bank's platform, and postal service portals while restoration efforts continued without a specified timeline.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 2 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On November 19, 2024, Costa Rica’s Dirección General de Migración y Extranjería (DGME) suspended access to its official website (www.migracion.go.cr) following the detection of a possible cyber attack. The agency implemented this measure to safeguard its computer systems and prevent unauthorized exposure of user data. While the DGME confirmed its security tools were operational at the time of the announcement, the website remained offline for over a week with no confirmed reactivation date. Updates regarding the website’s status were communicated exclusively through the institution’s social media channels. DGME General Director Jean Paul San Lee clarified that core immigration systems, including data capture for the DIMEX (Migratory Identity Document for Foreigners) and passport processing, remained unaffected. Border control operations and immigration security alerts also continued functioning normally. The suspension specifically disrupted all online services hosted on the website, including appointment scheduling, access to immigration requirements, and file monitoring tools.
The incident prevented users from utilizing the DGME’s online portal to request appointments for passports, shelters, exit permits, or to access the Trámite Ya platform for opening and tracking immigration files. Despite the website outage, the DGME emphasized that its physical offices maintained regular operations, ensuring no disruption to in-person immigration regularization processes or passport issuance. To mitigate service interruptions, the agency established alternative channels for appointment scheduling and inquiries. These included a dedicated call center (1311) for appointments at DGME offices or Correos de Costa Rica Electronic Service Windows (VES), appointment requests via Banco de Costa Rica through its 800-BCRCITA hotline or website, and passport procedures through Correos de Costa Rica’s virtual branch. No data breaches or compromises of user information were disclosed by the DGME in connection with the incident during the initial response period.