Puerto Rico Government Agency Cancels Driver’s License Appointments After Cyberattack

Why It Matters

The shutdown disrupts essential public services and highlights the island’s vulnerability to cyber threats, raising concerns for both citizens and businesses reliant on government infrastructure.

Key Takeaways

• DOT systems disconnected, all driver‑license appointments canceled
• PRITS leads response, no data theft evidence found
• Recent ransomware attacks show Puerto Rico’s heightened cyber risk
• Federal agencies assisting, but territorial resources remain limited
• Restoration depends on comprehensive system integrity testing

Pulse Analysis

The Puerto Rico Department of Transportation’s driver‑license and registration arm was forced to shut down its online scheduling system after a cyberattack was detected on Monday. The intrusion prompted the immediate disconnection of all departmental networks, leading to the cancellation of every upcoming appointment at the Centros de Servicios al Conductor (CESCO). This disruption follows a string of high‑profile breaches targeting Puerto Rican agencies, including a ransomware hit on a major IT vendor in December 2025 and a Justice Department compromise earlier this year. The pattern underscores the island’s growing exposure to sophisticated threat actors.

In response, the Puerto Rico Innovation and Technology Service (PRITS) activated its incident‑response protocol, working around the clock with the DOT to assess the breach and verify data integrity. Officials emphasized that no evidence of data exfiltration has emerged and that protecting citizens’ personal information remains the top priority. Technical teams are conducting system‑wide integrity checks before any services can be restored, with a tentative timeline that depends on successful completion of these tests. The agency has kept the public informed via social media, though many residents remain uncertain about when appointments will be rescheduled.

The episode highlights the challenges territories face in securing critical infrastructure, especially given Puerto Rico’s limited access to certain federal cybersecurity programs. Federal partners such as the FBI and the Cybersecurity and Infrastructure Security Agency have previously assisted with island‑wide incidents, but long‑term resilience will require sustained investment in modernized IT architecture and staff training. For businesses and investors, the recurring disruptions signal potential operational risks and reinforce the importance of robust cyber‑risk management strategies when dealing with Puerto Rican government entities.