Fuerza Armada de El Salvador

The Fuerza Armada de El Salvador, known in English as the El Salvador Armed Forces, serves as the national military of the Republic of El Salvador. Its fundamental responsibility is the defense of national sovereignty and territorial integrity, operating under the civilian authority of the government with its headquarters located within the country. As a state military institution, its core function encompasses traditional national security duties, including land, air, and naval defense operations. The organization's primary market and area of operation is exclusively within the borders of El Salvador, serving the state and its population. No specific details regarding its quantitative scale, such as personnel numbers or budget, are provided in the available information.

A defining incident for the organization occurred on August 15, 2022, when it was compromised in a widespread cyberattack attributed to the environmental activist collective Guacamaya. The hackers exploited known Microsoft ProxyShell vulnerabilities to gain access to the military's systems, resulting in the exfiltration of terabytes of sensitive internal documents. The leaked data exposed a range of confidential information, including internal communications, details of surveillance operations, and personal health information of officials. The attack also revealed documentation concerning environmental impacts related to infrastructure projects, which aligned with Guacamaya's stated motivation to expose governmental corruption, military repression, and ecological damage. The collective claimed to have selectively withheld certain data to avoid endangering individuals, though they criticized media outlets for focusing on personal scandals rather than the systemic issues their leak purported to reveal. This security breach prompted a formal governmental response from El Salvador and other affected nations across Central and South America, highlighting the Fuerza Armada's vulnerability to sophisticated cyber-espionage and the significant potential for sensitive state and personal data to be publicly disclosed. The incident stands as a notable event in the organization's recent history, illustrating the modern threat landscape facing national military institutions.