Puerto Rico cyberattack cancelled driver and vehicle-service appointments
THE BRIEF
The Puerto Rico Innovation and Technology Service said monitoring detected the activity and that defensive action stopped it. Officials did not publicly confirm ransomware, name an attacker or provide evidence that personal data had been stolen. Those limits matter: the operational disruption was clear, but the cause and full scope remained under investigation. For residents, the incident meant postponed appointments and uncertainty around routine documents needed for work, travel and vehicle use. Staff also had to manage a recovery process while preserving evidence and preventing reinfection. The event illustrates how a cyber incident can affect daily life even without a confirmed data breach or payment demand. People with scheduled appointments needed to rely on official rescheduling information rather than links circulating through unsolicited messages. Criminals often exploit public outages by sending fake refund, renewal or “priority appointment” offers, so the disruption could create a secondary impersonation risk.
WHY IT MATTERS
Digital government systems are part of public infrastructure because residents depend on them for legal documents and time-sensitive services. Taking systems offline can be the correct containment decision, but it shifts costs to individuals, employers and frontline staff. Agencies therefore need recovery plans that include trusted status communications, manual alternatives and clear rescheduling rules. The absence of a confirmed data theft does not make the event minor: service availability is itself a security outcome. Residents also need a reliable way to distinguish legitimate follow-up from scams that exploit the disruption.
WHO SHOULD CARE
Puerto Rico residents with license, permit or registration appointments are directly affected. Employers, transport businesses and public-service managers should also care because delayed documents can interrupt work, mobility and administrative deadlines even when no personal-data theft is confirmed.
WHAT TO DO NOW
- Check appointment and restoration updates only through official Puerto Rico government channels.
- Keep the original appointment confirmation and any cancellation notice for rescheduling.
- Ignore paid “priority appointment” or refund offers sent through unsolicited messages.
- Contact the agency through a published number if a deadline creates a work or legal problem.
- For agencies, maintain tested manual procedures and a public incident-status page independent of affected systems.
