INE denies having suffered a hack in its system; intrusion was last year

The INE rejected a recent attack by cybercriminals on its internal servers and guaranteed the integrity, availability and security of its computer systems.

The above, after a publication spread on the social network

The INE clarified that the event it refers to corresponds to an incident recorded last year, during the electoral period, which was attended to and contained in a timely manner.

The current INE networks have multi-factor authentication (MFA) and other security controls, strengthened as of that date and which prevent the use of previous accesses or credentials.

An information card indicates that two months ago a total purge of active VPN accounts was carried out, complemented by the implementation and activation of double authentication factor for all personnel with remote access, thus reinforcing institutional protection mechanisms.

“To date, there is no evidence of violation or indications of anomalous activity in institutional systems. The technical areas of the Computer System Technical Unit (UTSI), in coordination with the Computer Security and Control Directorate (DSCI) and the cybersecurity provider, maintain a preventive review and permanent monitoring of the technological infrastructure,” argued the institute.

A work session was held with the Secretariat of Security and Citizen Protection (SSPC) to define the inter-institutional coordination actions, as well as a technical meeting with the supplier to analyze the alleged data published in the dark web.

“So far, no information that belongs to the INE or evidence that supports the disseminated claims has been identified.”

In parallel, the provider specialized in cybersecurity carries out an independent analysis of the materials circulating on the dark web, without the veracity of the data or evidence of intrusion having been confirmed so far.

Preventively, A group of engineers is in central offices carrying out technical verifications on the communications infrastructure and security components in the reported network segment, in order to rule out any indication of risk..

CT