How much a cyberattack on a local government costs in Argentina (2026)

A local government in Patagonia recently reached out to us about cybersecurity: they wanted to know how exposed they were and what could happen if they got attacked. That conversation pushed us to seriously research what a cyberattack on a local government in Argentina actually costs, and the numbers are more concrete (and cheaper to prevent) than it looks.

It has already happened, more than once

This isn't a hypothetical scenario. The Municipality of Morón suffered a hack that affected its entire IT system. In Colonia Caroya, attackers demanded a 5,000-euro ransom after breaching the municipal government. At the national level, Argentina's National Immigration Directorate was hit by the Netwalker ransomware, with a ransom demand that started at 2 million dollars and escalated to 4 million when the agency didn't pay in time.

Small municipalities aren't exempt just because they're small. If anything, they're an easier target: they tend to have smaller IT budgets, older systems, and fewer people dedicated to security than a large company with its own security team.

The four costs that really add up

1. The ransom (if it's paid)

It's the most visible part, but not always the most expensive one. In the known Argentine cases it ranged from a few thousand euros to millions of dollars, depending on the size of the agency and how valuable the hijacked data is.

2. The system being down

While the system is down, the municipality can't collect fees, issue certificates, process paperwork or pay vendors normally. Every day of downtime is a day of degraded service to residents, with staff reassigned to manually handle what the system used to do on its own.

3. The leaked data

A municipality handles sensitive data about its residents: registries, records of past paperwork, sometimes health or social assistance data. A leak isn't just a technical problem, it's a public trust problem that can stick in people's memory for years.

4. Reputation and political cost

A mayor who suffers a widely reported cyberattack has to give public explanations, sometimes in the middle of a term already being judged on other issues. That wear and tear doesn't show up on any invoice, but it's real, and it gets paid at the next election.

What's coming on the regulatory side

In Mendoza, governor Cornejo sent a Cybersecurity Law bill to the Legislature that already got preliminary approval in the Senate. The bill invites municipalities to voluntarily join the Provincial Cybersecurity Plan, respecting municipal autonomy. It's not a national requirement yet, but it's a clear signal: the conversation about cybersecurity in the public sector is starting to move down from the national level to the provincial and municipal level.

If this trend spreads to other provinces, municipalities that already have the basics covered (backups, clean access control, an incident plan) will be in a much better position than the ones starting from zero once the law catches up with them.

Where to start without a big-company budget

You don't need a security department to cut down the most obvious risk. The first, cheapest step is having automated backups that are actually tested, keeping access to each system organized, keeping software up to date, and having a simple written plan for the day something fails. Most successful attacks on small agencies don't exploit a sophisticated flaw: they exploit the absence of these basic practices.

If your municipality or local government wants to understand how exposed it is and where to start, reach out to us on WhatsApp. We'll walk you through the concrete risks of your situation, without jargon, and what can be tackled first with the budget you have.