Background

A significant cyberattack has compromised Peru's National Police Intelligence Directorate (DIRIN), exposing sensitive state operations and creating a critical inflection point for the nation's cybersecurity posture. A hacker group known as 'Deface Perú' claimed responsibility, leaking confidential documents via the Telegram messaging app. The breach occurred despite a recent government tender valued at over seven million soles (approximately $1.9 million USD) aimed at bolstering the very security systems that were compromised.

The leaked files reveal extensive surveillance operations targeting journalists, including Marco Sifuentes and the weekly publication 'Hildebrandt en sus trece,' as well as prosecutors and judges involved in high-profile corruption cases like Odebrecht. Furthermore, the documents detailed protection plans for President Dina Boluarte and former presidents such as Pedro Castillo, Francisco Sagasti, and Martín Vizcarra, suggesting a long-standing pattern of political monitoring that transcends administrations. The exposure of these activities has ignited a national debate on data privacy, state power, and the vulnerability of critical government infrastructure.

Timeline

The incident unfolds against a backdrop of increasing digital threats. In the months leading up to the attack, the Peruvian National Police (PNP) issued a public tender for a comprehensive security implementation service, acknowledging existing vulnerabilities. The breach on September 4, 2025, marks a critical failure in this preventative strategy. In the immediate aftermath, 'Deface Perú' began disseminating the sensitive documents, with news outlets like 'La Encerrona' breaking the story to the public. The Peruvian government is now expected to launch a full-scale investigation and fast-track cybersecurity procurement over the next three to six months, creating a narrow window for specialized firms to engage.

Perspectives

Regional Perspective

From a Peruvian standpoint, this hack severely erodes public trust in security institutions and could exacerbate political instability. It exposes a deep-seated practice of domestic surveillance that many suspected but could not prove. For the broader Latin American region, this serves as a stark warning. Many governments in the region operate with similarly outdated digital infrastructure, making them prime targets. The incident in Peru will likely trigger a wave of security audits and spending increases across neighboring countries, as leaders seek to avoid similar public embarrassments and national security risks.