Uruguay's Digital Breach: A Crisis of Trust and Security

This report analyzes extensive data breaches affecting Uruguayan government entities, revealing a significant disparity between the nation's reputation for digital leadership and its actual cybersecurity capabilities. It highlights the sale of millions of sensitive records, including 30,000 National ID Public Key Infrastructure (PKI) certificates with cracked passwords, on dark web forums like DarkForums. The document identifies "Uruguayo1337" as a key threat actor with both political and financial motivations, exploiting systemic vulnerabilities like compromised credentials, misconfigurations, and outdated systems. Furthermore, the report examines Uruguay's legal framework and institutional capacity, acknowledging recent advancements while pointing out critical operational deficiencies in preventing and responding to these sophisticated cyberattacks, ultimately posing severe risks to citizens and national security.