Cyberattacks target major companies and institutions in Peru

Multiple major organizations in Peru have fallen victim to significant cyberattacks and data breaches. The ransomware group Direwolf targeted Interseguros, allegedly extracting 2.5 terabytes of data, including internal documents, source code, and millions of confidential customer records such as financial data and national ID numbers.

Other recent victims include the cosmetics multinational Belcorp, targeted by the Qilin ransomware group, and Banco Pichincha, which reportedly suffered a data leak via an SQL injection vulnerability. Movistar Perú has also been identified as a target of recent cyber activity.

In the Arequipa region, cybersecurity experts report that up to 50% of companies have experienced security incidents over the last five years. Recent breaches involving the Regional Government and the District Municipality of Yura saw criminals impersonate bank employees to steal more than S/ 2.4 million through irregular transfers. Experts warn that social engineering via WhatsApp, SMS, and email remains a primary method for stealing credentials and personal information.