Caja Costarricense de Seguro Social

The Costa Rican Social Security Fund, also known as the Caja Costarricense de Seguro Social or CCSS, is the national institution responsible for administering the country's social security system. It provides health insurance coverage, pension benefits, maternity and disability allowances, and occupational risk protection to workers, retirees, and their dependents. The fund is financed through mandatory contributions from employers, employees, and, for certain regimes, state subsidies. It manages both contributory and non‑contributory programs, extending coverage to informal workers and vulnerable populations. Through its network of hospitals, clinics, and primary care units, the CCSS delivers medical services directly to beneficiaries. Its overarching goal is to guarantee financial security and access to essential health care for the Costa Rican population.

The organization's headquarters are situated in Costa Rica, underscoring its role as a central public entity. While exact figures on staff size or beneficiary enrollment are not disclosed in the provided sources, the CCSS is widely recognized as one of the largest social security administrations in the region. Its operations are governed by national legislation that defines its regulatory responsibilities, including contribution collection, benefit adjudication, and oversight of health service delivery. The fund works in coordination with the Ministry of Health and other government bodies to align social protection policies with national development objectives. It also maintains partnerships with international organizations for technical assistance and capacity building. As a public institution, the CCSS is accountable to the Costa Rican citizenry and subject to governmental audit and oversight mechanisms.

In recent years the CCSS has encountered significant cybersecurity incidents. On May 31, 2022, it suffered a cyberattack that prompted a preventive shutdown of all systems to contain the threat, although critical databases concerning education, pensions, payroll, and medical records remained uncompromised. Restoration efforts were undertaken by internal technical teams supported by specialized external consultants, with the organization committing to issue updates as the investigation progressed. Earlier, on April 17, 2022, the fund's Human Resources portal was rendered inaccessible by an attack that formed part of a broader Conti ransomware campaign targeting multiple Costa Rican government agencies. The incident disrupted access to HR services for employees and the public, prompting the CCSS to take the affected systems offline for forensic analysis. Response actions included engagement of third‑party cybersecurity experts and ongoing monitoring to prevent further compromise.