Puerto Rico Department of Transportation Halts Driver’s License Services After Cyberattack
What Happened — The island’s Department of Transportation forced a complete shutdown of its licensing and registration systems after a cyberattack was detected on Monday, leading to the cancellation of all upcoming driver‑license appointments. The Puerto Rico Innovation and Technology Service (PRITS) is working to restore the environment, and officials say no evidence of data theft has been found.
Why It Matters for TPRM —
- Service disruption in a critical public‑service function can cascade to downstream vendors and citizens.
- Lack of public details on the attack vector makes risk assessment of third‑party IT providers difficult.
- Repeated targeting of Puerto Rican government entities highlights the need for continuous monitoring of supply‑chain security posture.
Who Is Affected — Government agencies (transportation, licensing), citizens requiring driver’s licenses, and any third‑party vendors supporting the agency’s IT infrastructure.
Recommended Actions — Review contracts and security controls with the agency’s IT service provider (PRITS); verify incident‑response and data‑protection clauses; monitor for any follow‑up disclosures of data compromise; consider alternative service continuity plans.
Technical Notes — Attack discovered by a security monitoring system; systems were disconnected as a containment step; no ransomware confirmation; no publicly disclosed CVEs or specific vulnerability; impact limited to service outage with no confirmed data exfiltration. Source: The Record