Cybercrime

Legal defense and prosecution for computer crimes under Colombia's Law 1273 of 2009 — hacking, data theft, unauthorized transfers, and digital fraud.

Contact Us

Cybercrime

Colombia's cybercrime framework is primarily governed by Law 1273 of 2009, which created a new protected legal interest — 'Protection of Information and Data' — and added Articles 269A through 269J to the Penal Code. These provisions criminalize unauthorized access to computer systems (48 to 96 months imprisonment), interception of data (36 to 72 months), unauthorized asset transfers through computer manipulation (48 to 120 months), and several other digital offenses, with fines ranging from 100 to 1,500 monthly minimum wages.

Penalties are increased by up to 75% when the conduct involves financial systems, government networks, abuse of trust, disclosure of information to harm third parties, or terrorist purposes. This makes cybercrime cases in Colombia particularly high-stakes, especially for technology professionals, IT administrators, and companies that handle sensitive data or operate digital platforms.

At Legal Diligence Medellín, we represent both victims and defendants in cybercrime cases. Whether you need to pursue criminal charges against someone who hacked your systems, defend against accusations of unauthorized access, or respond to a data breach with proper legal and regulatory compliance, our team combines deep knowledge of Colombian criminal procedure with technical understanding of digital evidence.

Problems We Solve

Hacking and unauthorized access charges

You face charges under Article 269A for allegedly accessing a computer system, network, or database without authorization — penalties range from 48 to 96 months imprisonment.

Victim of cybercrime seeking prosecution

Your personal accounts, business systems, or data have been compromised by hackers, and you need to file criminal complaints and pursue prosecution through the Fiscalía.

Data theft and interception

Sensitive personal or business data has been intercepted or stolen, triggering both criminal liability under Law 1273 and data breach obligations under Law 1581 of 2012.

Unauthorized digital asset transfers

Funds have been transferred from your accounts through computer manipulation, or you face accusations of conducting unauthorized transfers under Article 269J.

Our Approach

1

Digital Evidence Preservation

We work with forensic specialists to preserve, collect, and authenticate digital evidence following chain of custody requirements that ensure admissibility in Colombian criminal courts.

2

Criminal Complaint or Defense Strategy

For victims, we file and pursue criminal complaints before the Fiscalía. For defendants, we build technical defenses challenging the evidence, jurisdiction, and attribution of the alleged conduct.

3

Regulatory Compliance Coordination

We coordinate criminal proceedings with data breach notification obligations to the SIC (Superintendencia de Industria y Comercio) under Law 1581 and help minimize regulatory exposure.

Frequently Asked Questions

What does Law 1273 of 2009 cover?

Law 1273 created Articles 269A through 269J of the Colombian Penal Code, criminalizing unauthorized system access, data obstruction, interception, computer damage, malware use, identity theft in digital contexts, unauthorized asset transfers, and other computer-related offenses.

What should I do if my company's systems are hacked?

Immediately preserve all digital evidence without modifying affected systems. Contact a lawyer to file a criminal complaint with the Fiscalía and assess your data breach notification obligations under Law 1581 of 2012. Report the incident to the Colombian Cyber Police (CAI Virtual) for technical support.

Are penalties increased for cybercrime involving financial systems?

Yes. Under Law 1273, penalties increase by up to 75% when the cybercrime targets financial system networks, government systems, or involves abuse of a position of trust, disclosure of information to harm third parties, or terrorist purposes.

Can I be charged with cybercrime for accessing my own company's systems?

It depends on the circumstances. If you had authorized access, this is a strong defense. However, exceeding the scope of authorization, accessing systems after termination of employment, or using access for unauthorized purposes can constitute criminal conduct under Colombian law.

15+
Years of experience
500+
Clients served
98%
Satisfaction rate
24h
Response time

Need legal advice?

Our team of lawyers is ready to help you. Contact us today for a consultation.

Contact Us