Cyber Incident Victim: Policía de la Provincia de Córdoba
Date:
Jul 2025
Location:
Argentina
Summary
Policía de la Provincia de Córdoba confirmed a recent external cyberattack that occurred shortly before their statement and affected only administrative labor records of police personnel. The intrusion did not compromise sensitive data, institutional design, operational technology, or critical public safety systems, and was detected promptly, triggering containment and mitigation measures and notification to the judicial authority for investigation. Officials stated the attack was not due to internal vulnerabilities or structural failures but an intentional digital intrusion currently under forensic technical analysis, prompting activation of cybersecurity protocols and reinforcement of safeguards for sensitive information within the system. They emphasized the incident was confined to administrative bases, posed no operational risks, did not expose police procedures or public information, and citizen safety remained unaffected, while technical teams continue to trace the attack and the case remains under judicial review.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 0 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On July 16, 2025, the Policía de la Provincia de Córdoba was subjected to a cyber intrusion that originated from an external source, as later confirmed by the force’s official communications. The unauthorized access was identified by the institution’s monitoring systems approximately twenty‑four hours before the public statement was released on July 17, 2025. Upon detection, the police initiated immediate containment procedures to limit the spread of the intrusion and began mitigation actions to secure the affected environment. The incident was promptly reported to the competent judicial authority so that a formal investigation could be opened under the supervision of the Prosecutor’s Office.
In the official communiqué issued on July 17, 2025, the Policía de Córdoba explicitly stated that the breach did not result from any internal vulnerability or structural deficiency in its information technology infrastructure. The force characterized the event as an intentional digital intrusion carried out by an outside actor, emphasizing that the attack was not accidental or the result of a system flaw. The communiqué noted that the case had been handed over to specialized forensic experts for a detailed technical analysis aimed at establishing the exact methods and pathways used by the intruder. The police reiterated that, despite the external origin, the incident triggered the activation of established cybersecurity protocols within the organization.
The scope of the intrusion was limited to administrative labor records that pertain to police personnel, and no other categories of data were accessed according to the official description. The force confirmed that the breach did not compromise sensitive personal information, nor did it expose any details related to police procedures, investigative techniques, or operational tactics. Furthermore, the attack did not affect the institutional design of the police organization, nor did it impair any critical technological systems that support public safety functions. As a result, the police assured that there was no risk to the safety of citizens and that the continuity of routine police operations remained unaffected.
Following the detection, the Policía de Córdoba reinforced its internal safeguards for sensitive information, applying additional security measures to the systems that house administrative data. The technical teams responsible for cybersecurity began a forensic examination to trace the origin of the intrusion, collect relevant logs, and identify any indicators of compromise that could assist in attributing the attack. The force indicated that the investigation is ongoing, with experts working to determine the full traceability of the event while preserving the integrity of the evidence for judicial proceedings. Throughout this process, the police maintained communication with the judicial authority to ensure that the case remains under proper legal oversight.
The Policía de Córdoba concluded its statement by reaffirming its commitment to the protection of information security and the respect for fundamental rights of both its staff and the general public. The force emphasized that it will continue to address technological challenges with professionalism, responsibility, and transparency, drawing lessons from the incident to improve its defensive posture. The police noted that, while the incident is still under analysis, it has not disrupted the normal functioning of its information technology systems or impaired its ability to carry out daily duties. The case remains in the hands of the Judicial Power, which will determine any further legal steps based on the findings of the forensic investigation.