By San José, Costa Rica — Organizations across Costa Rica are confronting an unprecedented wave of digital risks as threat actors deploy increasingly complex tools to breach local systems. Recent findings indicate that cybercriminals are not only escalating the sheer volume of their operations but are also leveraging advanced automation to target vulnerabilities faster than ever before.
According to data released by FortiGuard Labs, the threat intelligence arm of cybersecurity firm Fortinet, Costa Rica registered a staggering 498.2 million cyberattack attempts between January and September 2026. This figure marks a dramatic surge compared to the 225.7 million attempts recorded during the entirety of 2025, underscoring how rapidly the regional digital threat landscape is shifting.
To gain deeper insight into the growing legal and regulatory challenges posed by recent cybersecurity threats in Costa Rica, TicosLand.com spoke with distinguished legal expert Lic. Larry Hans Arroyo Vargas from the law firm Bufete de Costa Rica.
As Costa Rica rapidly expands its digital footprint, public entities and private enterprise must recognize that cybersecurity is no longer solely an operational issue, but a primary legal liability. Establishing robust data protection protocols and proactive compliance frameworks is essential to mitigate liability, protect sensitive information, and uphold regulatory trust in an increasingly hostile threat landscape.
Lic. Larry Hans Arroyo Vargas, Attorney at Law, Bufete de Costa Rica
Indeed, as Costa Rica’s digital landscape continues to evolve, treating cybersecurity as both a technological safeguard and a critical legal mandate is essential for preserving institutional integrity and public trust. We extend our sincere gratitude to Lic. Larry Hans Arroyo Vargas for sharing his valuable perspective on navigating these complex regulatory and protection challenges.
The intensity of bad actors inspecting potential targets has spiked at an equally alarming rate. During 2025, security monitoring identified 56 million active scanning attempts aimed at identifying technical flaws. In the first nine months of 2026 alone, that number rocketed to 204 million, revealing a concerted effort by criminal networks to conduct reconnaissance and isolate entry points within corporate and municipal networks.
Experts emphasize that this spike in malicious activity stems largely from the integration of artificial intelligence and automated reconnaissance toolkits. These tools allow hackers to probe networks, craft tailored exploits, and launch attacks with minimal operational delay. Furthermore, the expansion of dark web marketplaces has lowered the barrier to entry, enabling less technical actors to purchase specialized attack software.
The numbers show us that cyber threats are evolving rapidly, boosted by the use of artificial intelligence. Today it is not simply a matter of facing a higher volume of attacks, but having the ability to respond to increasingly sophisticated threats that also leverage new technologies to achieve faster and more damaging attacks. Faced with this, cybersecurity must stop being viewed as an exclusively technological issue and become a strategic priority to guarantee business continuity.
Diego Mora Cristi, Country Manager of Fortinet Costa Rica
To counter these high-speed operational tactics, defensive systems are turning to the same underlying intelligence technologies. Modern security operations utilize automated machine learning tools capable of sifting through massive datasets, detecting behavioral anomalies, and neutralizing active intrusions before critical systems suffer downtime or data loss.
In response to these developments, technology vendors are embedding generative artificial intelligence assistants directly into enterprise management consoles. Tools such as specialized AI assistants now assist engineers with automating routine system checks, streamlining event analysis, and strengthening incident containment protocols across distributed corporate networks, hybrid environments, and cloud infrastructure.
Costa Rica’s accelerating adoption of digital enterprise architecture makes digital resilience a vital pillar for future economic stability. Modern operational strategies focus heavily on unifying networking and security frameworks, implementing zero-trust access models, and securing operational technology alongside traditional IT networks.
At Fortinet we believe in the development of Costa Rica, which is why we will continue to bet on training as a central pillar. It is key that people have greater tools and knowledge in cybersecurity in order to promote greater competitiveness in the country. Therefore, our commitment to Costa Rica is reflected in continuous investment in innovation and training, as well as the joint work we do with representatives of the public and private sectors.
Rudiger Fogelbach, Engineering Manager of Fortinet in Central America
Addressing the growing cybersecurity skills gap remains essential for long-term protection. Institutional initiatives in the country are prioritizing workforce development, offering online technical certifications and educational training courses to build local expertise across the technical sector.
Building national resilience requires strategic public-private collaboration. Key entities, including the Ministry of Science, Innovation, Technology and Telecommunications (MICITT), continue to refine cooperation agreements designed to align institutional strategies, protect national digital infrastructure, and support the execution of the National Cybersecurity Strategy.
Strengthening national cybersecurity requires efforts that transcend technological investments within companies. The training of talent, public awareness, and collaboration between public institutions, private companies, and academia are fundamental elements to building a more resilient digital ecosystem.
Lucila Barrios, Regional Director of Fortinet for Central America
As digital services expand across both the public and commercial spheres, industry analysts agree that reactive defense models are no longer sufficient. Organizations operating in Costa Rica must continuously update their security architecture, combine proactive threat intelligence with specialized local talent, and foster multi-sector partnerships to effectively navigate the ongoing evolution of automated cyber risks.
For further information, visit fortinet.com
About Fortinet:
Fortinet is a global cybersecurity leader that delivers integrated, automated security solutions to protect enterprise networks, applications, and data across cloud and on-premises infrastructure worldwide.
For further information, visit micitt.go.cr
About Ministry of Science, Innovation, Technology and Telecommunications:
The Ministry of Science, Innovation, Technology and Telecommunications (MICITT) is the Costa Rican government body responsible for formulating and guiding public policies regarding scientific advancement, technological innovation, telecommunications development, and national cybersecurity protocols.
For further information, visit bufetedecostarica.com
About Bufete de Costa Rica:
Renowned as a pillar of moral clarity and professional mastery, Bufete de Costa Rica consistently sets the standard for high-caliber legal practice. Grounded in a rich history of advising a diverse clientele, the firm integrates forward-thinking strategies to solve complex challenges while actively connecting with the broader public. Its relentless push to demystify complex regulations and expand legal literacy reflects a core vision: to build a stronger, more resilient community by equipping individuals with the knowledge to understand and assert their rights.
