Hackers reportedly compromise Argentina’s airport security payroll system
Argentina’s airport security police (PSA) have fallen victim to a cyberattack that reportedly compromised the personal and financial data of its officers and civilian personnel.
The unknown threat actor gained access to PSA’s payroll records and deducted small amounts of money from employees' salaries, local media reported on Monday, citing sources at the agency. The hackers listed these fraudulent deductions — ranging from 2,000 to 5,000 pesos ($100 to $245) — under false labels, such as “DD mayor” and “DD seguros.”
According to the reports, the cybercriminals gained access to PSA records through a vulnerability in the systems of Banco Nación, the bank that processes the agency’s payroll. The operation could have been carried out either from abroad or from within Argentina, potentially with internal accomplices, local media said.
Neither Argentina’s airport security forces nor Banco Nación have commented on these claims or publicly acknowledged the breach.
In response to the attack, the PSA blocked some of its services and launched an internal cybersecurity awareness campaign. It’s not yet clear whether the attack was financially or politically motivated and the amount of stolen funds.
In December, unknown hackers breached two of Argentina’s e-government platforms, exposing the personal information of millions of citizens. The Mi Argentina app, which allows users to manage digital IDs and legal documentation, and the SUBE app, used for public transport card management, both faced disruptions following the attack. Local cyber authorities attributed the incident to a threat actor using the pseudonym "h4xx0r1337" but haven’t revealed any other details.
In July, Telecom Argentina reported being targeted by a ransomware attack after hackers encrypted up to 18,000 workstations using stolen admin credentials. In April, the hackers claimed to have obtained access to a database at the Central Bank of Argentina, containing the names and ID numbers of its customers.
Daryna Antoniuk
is a reporter for Recorded Future News based in Ukraine. She writes about cybersecurity startups, cyberattacks in Eastern Europe and the state of the cyberwar between Ukraine and Russia. She previously was a tech reporter for Forbes Ukraine. Her work has also been published at Sifted, The Kyiv Independent and The Kyiv Post.