China Demands Proof After Costa Rica Blames UNC2814 for ICE Cyberattack

Costa Rica reported a cyberespionage breach of the state-run ICE administrative email systems, alleging approximately 9 GB of internal emails were exfiltrated and attributing the intrusion to UNC2814 — a suspected China-linked APT tracked by Google/Mandiant. The disclosure has escalated into a diplomatic dispute after China denied involvement and requested technical evidence, while investigators and international partners have linked the activity to a broader global campaign targeting telecommunications and government organizations.