Cyber Incident Victim: Concejo Municipal de La Ceja del Tambo
Date:
Feb 2025
Location:
Colombia
Summary
The municipal council of La Ceja experienced a cyberattack resulting in unauthorized access to its Instagram account, leading to permanent loss of control. Despite recovery efforts, attackers maintained persistent access, prompting the creation of a replacement account. The incident involved systematic data alteration, identity theft, and illicit access to digital systems, with evidence suggesting a coordinated effort against institutional integrity. Authorities were notified to investigate the criminal breaches, which included multiple violations of cybersecurity laws.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 4 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
The Instagram account belonging to the Concejo Municipal de La Ceja del Tambo was compromised by unidentified attackers, resulting in the permanent loss of administrative control by the municipal council. Despite repeated efforts to regain access to the compromised account, recovery attempts proved unsuccessful. The council confirmed the incident was a deliberate cyberattack targeting institutional integrity, noting subsequent malicious activities demonstrated the hack was part of a coordinated campaign rather than an isolated event. In response, the Concejo established a replacement official account (@concejolacejaoficial) to maintain public communications. Initial statements characterized the attack as involving unauthorized system access, data manipulation, and identity theft—all criminal offenses under Colombian law.
The council formally reported the incident to judicial authorities for investigation, emphasizing the attackers’ violations of cybersecurity statutes. Operational impacts included the disruption of official communications through the original Instagram channel, necessitating public redirection to the new account. No specific details regarding the duration of unauthorized access, altered content, or attacker motives were disclosed by the council. The investigation remains ongoing, with no attribution to specific individuals or groups. Institutional consequences centered on reputational risks and procedural disruptions, though no financial losses or compromised citizen data were cited in available reports. Legal proceedings will determine potential penalties for identified perpetrators based on evidence submitted by municipal authorities.