Suspected cyberattack disrupts Bermuda public services and other regional governments

Bermuda’s government experienced a major cyberattack that disrupted essential services, including electronic payments on Thursday, 21 September. Preliminary findings suggest that the attack may have originated from Russia, although the exact nature of the attack, whether it involved ransomware or other malware, remains uncertain.

Bermuda Premier David Burt emphasised the severity and sophistication of the attack, acknowledging that it had put significant strain on essential government systems. The government promptly initiated efforts to isolate and contain the infiltration upon detecting it.

Why does it matter?

The cyberattack extended its reach beyond Bermuda, affecting other Caribbean governments’ systems. While it is unclear which countries were affected beyond Bermuda, experts have expressed concerns about cybersecurity vulnerabilities in Latin America and the Caribbean and a growing trend in cyberattacks as governments increasingly digitise their services.
Latin America and the Caribbean have been identified as the world’s least-prepared region to fend off cyberattacks, according to an index compiled by ITU. This situation can be partly attributed to a positive trend: the significant shift of life to online that occurred during the pandemic. Notably, this region has witnessed substantial innovation in fields like fintech and e-commerce. However, this digital transformation has not been met with corresponding efforts and investments in cybersecurity.

The frequency of these attacks is alarming, with reports indicating that companies in Latin America and the Caribbean experience a staggering 1,600 cyberattacks per second. The true gravity of such breaches often remains hidden until the point when ransomware is deployed, or stolen data surfaces on the dark web.

While cybersecurity is a global concern, the Latin American region faces unique challenges due to lagging legislation and a general lack of awareness. This predicament often places the responsibility squarely on the shoulders of tech experts. Digital security is fundamentally a structural problem that necessitates attention at the highest levels of leadership, extending from corporate boardrooms to presidential offices.