On 17 April 2022 the Conti group compromised systems at Costa Rica’s Finance Ministry, disrupting tax collection and customs processing. Reporting places the eventual spread at 27 government institutions, among them the Ministry of Labour, the Ministry of Science, the Social Development Fund and the national meteorological institute.
Conti demanded $10 million, later doubled to $20 million. The government refused. On 8 May, newly inaugurated President Rodrigo Chaves declared a national emergency and said the country was at war with the group.
Customs Is The Detail That Matters
Tax collection stopping is a fiscal problem a state can absorb for a while. Customs processing stopping is a physical one: goods sit at the border and do not move, and the cost accrues to importers, exporters and eventually to anyone buying what was in the container.
This is availability harm at national scale, and the corpus argues at 24-1231 that it goes uncounted because no regime asks for it. Here it was counted, in the only way a state has available — by declaring the emergency that unlocks emergency powers.
The Declaration Is The Precedent
Reporting describes this as the first national state of emergency declared anywhere in response to a cyberattack. The significance is not rhetorical. An emergency declaration is a legal instrument: it changes what a government may spend, procure and compel without ordinary process.
The corpus files the guidance side of the same recognition at 26-0728, where critical infrastructure operators were told to plan for degraded operation rather than for prevention. Costa Rica is the case where a state stopped treating a criminal extortion campaign as a policing matter and started treating it as a continuity-of-government one.
Refusal, And What It Costs
The government did not pay. This corpus consistently records that refusal is answered by publication rather than by the attacker going away, and it does not present non-payment as a costless choice — the disruption is the price, and it is paid by people who were not consulted.
What Costa Rica demonstrates is that the price is payable. The comparison the desk draws at 22-1024 for Medibank is the same decision made by a private company with a different category of data at stake, and the same answer.
Built on contemporaneous reporting and on the CCDCOE’s case documentation. The 17 April 2022 initial compromise of the Finance Ministry, the disruption to tax and customs processing, the spread to 27 institutions, the $10m demand doubled to $20m, the refusal to pay, and the 8 May emergency declaration by President Chaves are as reported. The characterisation of this as the first such declaration by any state is widely reported and this desk has not found a prior instance, but it is recorded as a reported claim rather than as a verified first. No figure is asserted for the economic cost of the customs disruption — none was authoritatively published. Graded high. Corrections: corrections@forensicpost.com.