Argentina's Judiciary of Cordoba targeted with ransomware

Argentina's Judiciary of Cordoba targeted with ransomware

Argentina's Judiciary of Córdoba was forced to take down its IT systems following a ransomware attack allegedly conducted by operators behind the Play ransomware operation.

According to local media, the incident, which occurred on August 13, 2022, impacted the agency’s website, digital services and databases, making it “worst attack on public institutions in history.”

The Judiciary has confirmed that it has been targeted with ransomware and is now conducting an investigation together with cyber security experts and local authorities.

Although the Judiciary did not share the details of the intrusion, some news media reported that the attack involved a variant of the Play ransomware, first spotted in June 2022.

Like any other ransomware operation, the Play ransomware operators breach target networks and encrypt files appending the .PLAY extension.

It’s not clear at this point how the intruders managed to breach the Judiciary’s systems. One possible explanation could be that they obtained login credentials by phishing the agency’s employees using a list of employee email addresses, which was leaked as part of the Lapsus$ breach of Globant in March.


Back to the list

Latest Posts

US agencies warn of rising cyber threats from Iran-linked hackers

US agencies warn of rising cyber threats from Iran-linked hackers

Recent months have seen a notable uptick in activity from Iranian-linked hacktivists and government-affiliated threat groups.
1 July 2025
Google rolls out urgent Chrome security patch for active zero-day

Google rolls out urgent Chrome security patch for active zero-day

The flaw, tracked as CVE-2025-6554, is described as a type confusion bug in Chrome's V8 JavaScript and WebAssembly engine.
1 July 2025
Canada bans Chinese surveillance firm Hikvision over national security concerns

Canada bans Chinese surveillance firm Hikvision over national security concerns

From now on, all federal departments, agencies, and Crown corporations are prohibited from purchasing Hikvision products.
1 July 2025