US says 'stands firmly' with Costa Rica after cyber intrusion

The U.S. government has reaffirmed its commitment to supporting Costa Rica in addressing cybersecurity threats and strengthening regional security. Secretary of State Marco Rubio emphasized this during a joint press conference with Costa Rican President Rodrigo Chaves, highlighting U.S. assistance to enhance Costa Rica's cybersecurity infrastructure, 5G development, and efforts to combat drug trafficking according to a recent report. The Central American nation faces over 100 million cyberattacks annually, with recent reports identifying intrusions by cybercriminal groups linked to China targeting its telecommunications systems, an allegation the Chinese Embassy in Costa Rica denied as reported.

In late 2024, the U.S. deployed its Foreign Assistance Leveraged for Cybersecurity Operational Needs (FALCON) initiative to respond to a ransomware attack on Costa Rica's state-run oil refinery, RECOPE. The operation, costing approximately $500,000, helped investigators identify the attack vector—a phishing email—and remove ransomware from the system without paying the $5 million demand according to the State Department. This marked FALCON's first real-world deployment, with U.S. officials praising its ability to deliver rapid, actionable support during crises as noted.

The Biden administration has previously allocated $25 million to bolster Costa Rica's digital defenses, addressing a surge in ransomware attacks, including those by Russia-linked groups like Conti in 2022 according to analysis. U.S. aid to Costa Rica also includes a waiver allowing continued cooperation with agencies like the FBI to disrupt drug trafficking networks. Rubio noted that Costa Rica's effective use of U.S. aid aligns with shared security priorities, including curbing illegal immigration and narcotics flows as stated.

Costa Rica's strategic role as a U.S. partner in cybersecurity and technology has drawn regional attention, with other Latin American nations seeking similar support. The collaboration underscores the importance of cross-border digital resilience amid escalating global cyber threats according to experts.