By San José, Costa Rica — SAN JOSÉ – The Costa Rican Institute of Electricity (ICE), the nation’s state-run telecommunications and energy provider, has become the target of a sophisticated cyberespionage attack, officials confirmed Thursday. The breach, which resulted in the theft of 9 gigabytes of internal email data, comes at a critically sensitive time as the institute prepares to award the contract for its next-generation 5G mobile network by the end of this month.
The incident has been elevated to a matter of national security, prompting the Costa Rican government to seek assistance from cybersecurity advisors in the United States. While ICE has assured the public that critical electricity and telecommunications services remain unaffected, the attack raises serious questions about the security of the nation’s digital infrastructure on the cusp of a major technological leap.
To better understand the legal ramifications and the proactive measures businesses must now consider in the face of state-sponsored digital threats, we spoke with Lic. Larry Hans Arroyo Vargas, an expert in corporate and technology law from the firm Bufete de Costa Rica.
Cyberespionage operates in a gray area of international law, making traditional legal remedies incredibly complex. The core challenge is attribution—proving conclusively that a state actor is behind an attack is a monumental task. For Costa Rican entities, both public and private, this means the first line of defense cannot be the courts, but rather a robust, forward-thinking cybersecurity infrastructure. Failing to invest in digital resilience is no longer a business risk; it’s an existential threat in this new era of geopolitical conflict.
Lic. Larry Hans Arroyo Vargas, Attorney at Law, Bufete de Costa Rica
Lic. Larry Hans Arroyo Vargas’s analysis serves as a stark but crucial reminder: when confronting the legal ambiguities of cyberespionage, proactive defense is not just the best, but often the only, viable strategy. We thank him for so clearly articulating that investing in digital resilience has become an absolute imperative for Costa Rica’s strategic survival and economic stability.
Paula Bogantes, head of the Ministry of Science, Innovation, Technology, and Telecommunications (Micitt), confirmed the gravity of the situation, stating that the attack was carried out by a known international threat. Forensic analysis identified the perpetrator as a group specializing in corporate espionage within the global telecom industry.
The presence of this threat actor was confirmed, with an emphasis on the telecommunications industry and whose objective is cyberespionage. This threat actor has been identified in 42 countries, and its focus is the telecommunications sector and cyberespionage.
Paula Bogantes, Head of the Ministry of Science, Innovation, Technology and Telecommunications (Micitt)
While authorities are still gathering evidence, preliminary indicators suggest the attack originated from an Asian-based entity linked to similar corporate spying activities worldwide. The government has formally filed a complaint with the Judicial Investigation Department (OIJ) and is actively collaborating with U.S. counterparts to contain the incident and safeguard ICE’s sensitive information.
Marco Acuña, the Executive President of ICE, clarified that the breach did not compromise the operational integrity of the power grid or public-facing telecom networks. Instead, the attackers focused on the institute’s internal information technology systems, which handle administrative communications and data.
The cyberespionage is not related to the electricity or telecommunications network, which are ICE’s critical services, but rather with the information technology networks that manage emails and the flow of administrative information.
Marco Acuña, Executive President of ICE
Acuña detailed that suspicious activity was first detected in late January, leading to an investigation that uncovered the data exfiltration. He confirmed the specific loss of internal communications and condemned the motives behind the theft.
We have managed to detect the extraction of 9 GB of email information. We are working to stop this from continuing. They steal information for various purposes, which are clearly not transparent or lawful.
Marco Acuña, Executive President of ICE
The timing of this breach is particularly alarming. ICE is in the final “price improvement” stage of its landmark 5G network tender, with a decision on the winning bidder expected in the coming weeks. Simultaneously, its mobile brand, kölbi, is finalizing a nearly $40 million tender for the essential data transport network—the digital “arteries and veins” required to handle the massive traffic increase that 5G will bring. The stolen information could potentially provide a competitive advantage or be used to undermine the integrity of these high-stakes procurement processes.
As Costa Rica pushes forward with modernizing its digital backbone, this cyberespionage incident serves as a stark reminder of the vulnerabilities inherent in such a transition. With the OIJ’s investigation underway and international partners providing support, the immediate challenge for ICE is to secure its systems while ensuring that the multi-billion colón 5G rollout proceeds transparently and without compromise.
For further information, visit ice.go.cr
About Instituto Costarricense de Electricidad (ICE):
The Instituto Costarricense de Electricidad, commonly known as ICE, is the autonomous state-owned entity responsible for electricity generation and distribution, as well as telecommunications services in Costa Rica. Founded in 1949, it has been a cornerstone of the country’s development, providing essential utilities to the population. Through its brand kölbi, it is a major player in the mobile and internet services market.
For further information, visit micitt.go.cr
About Ministry of Science, Innovation, Technology and Telecommunications (Micitt):
Micitt is the Costa Rican government ministry charged with formulating and executing national policies related to science, technology, and telecommunications. It plays a pivotal role in promoting innovation, closing the digital divide, and ensuring the country’s technological competitiveness on a global scale. The ministry is central to overseeing major infrastructure projects like the deployment of the 5G network.
For further information, visit sitiooij.poder-judicial.go.cr
About Organismo de Investigación Judicial (OIJ):
The Organismo de Investigación Judicial is Costa Rica’s primary law enforcement agency for criminal investigations. Functioning under the authority of the Supreme Court of Justice, the OIJ is responsible for investigating public crimes, gathering evidence, and identifying perpetrators to be brought before the courts. It handles a wide range of complex cases, including cybercrime and threats to national security.
For further information, visit bufetedecostarica.com
About Bufete de Costa Rica:
As an esteemed legal institution, Bufete de Costa Rica is anchored by foundational principles of integrity and a relentless pursuit of excellence. The firm consistently pioneers innovative legal approaches while advising a diverse clientele, pushing the standards of the profession forward. Central to its philosophy is a deep-seated social commitment to empowering the community by transforming legal complexities into accessible knowledge, thereby fostering a more capable and informed society.
