Hackers derrubam sistemas do ALMA, maior radiotelescópio do mundo

The antennas remained untouched, the data uncompromised.
Despite the cyberattack's severity, ALMA's core scientific infrastructure and decades of research survived intact.

Na madrugada de 29 de outubro, um ciberataque silencioso apagou os sistemas computacionais do Atacama Large Millimeter Array, no Chile — o radiotelescópio considerado o mais poderoso do mundo. As 66 antenas permaneceram intactas e nenhum dado científico foi comprometido, mas a intrusão suspendeu as observações astronômicas e derrubou os serviços de comunicação interna da instituição. O episódio levanta uma questão que transcende a astronomia: em que medida a infraestrutura do conhecimento humano está protegida contra ameaças que não vêm do cosmos, mas da própria Terra.

  • Às 6h14 do dia 29 de outubro, sistemas críticos do ALMA foram comprometidos de forma tão rápida que a equipe mal teve tempo de reagir antes de o dano estar feito.
  • O ataque derrubou e-mails e sistemas administrativos em toda a instituição, cortando a comunicação entre equipes distribuídas em múltiplos continentes.
  • As 66 antenas e anos de dados científicos — incluindo contribuições para a primeira fotografia de um buraco negro, em 2019 — permaneceram intocados, o que limitou o alcance real da invasão.
  • A liderança do observatório agiu com rapidez, confirmando a neutralização da ameaça e trabalhando para restaurar os sistemas, mas nenhum grupo reivindicou a autoria e nenhum pedido de resgate foi feito.
  • As autoridades chilenas investigam a origem e o motivo do ataque em meio a um silêncio perturbador — e a pergunta que fica é quais outras infraestruturas científicas críticas podem estar igualmente expostas.

Na manhã de 29 de outubro, às 6h14, o Atacama Large Millimeter Array entrou em colapso digital. Um ciberataque penetrou os sistemas computacionais do observatório no Chile, forçando a suspensão das observações astronômicas e a retirada do site institucional do ar. A velocidade da intrusão surpreendeu a equipe — quando perceberam o que havia acontecido, os danos já estavam feitos.

O alcance da invasão foi o que mais alarmou. Os atacantes não comprometeram apenas um servidor isolado: desativaram os sistemas de e-mail de toda a instituição, paralisando a comunicação interna de uma das instalações científicas mais colaborativas do mundo. Para um observatório que coordena equipes em múltiplos continentes, esse tipo de ruptura atinge o núcleo das operações.

Mas a avaliação dos danos trouxe algum alívio. As 66 antenas do ALMA — cada uma com quase 12 metros de diâmetro — permaneceram intactas e operacionais. Os dados científicos acumulados ao longo de anos, incluindo as observações que contribuíram para a histórica primeira fotografia de um buraco negro em 2019, não foram acessados nem corrompidos. O ataque havia ficado contido à infraestrutura administrativa.

A direção do observatório respondeu com rapidez e serenidade, confirmando que a ameaça havia sido neutralizada e que especialistas trabalhavam para restaurar os sistemas. Os serviços de e-mail começaram a ser reativados de forma gradual. O tom era o de uma instituição abalada, mas confiante em sua recuperação.

O que permaneceu sem resposta foi a identidade e a intenção dos atacantes. Nenhum grupo reivindicou a ação. Nenhum pedido de resgate surgiu. As autoridades chilenas abriram investigação, mas as pistas eram escassas. E enquanto as equipes do ALMA reconstruíam seus sistemas, uma pergunta mais ampla pairava: se o radiotelescópio mais poderoso do mundo pode ser derrubado por um ataque cibernético, o que mais — entre as grandes infraestruturas do conhecimento humano — está igualmente vulnerável?

On the morning of October 29th, at 6:14 a.m., the Atacama Large Millimeter Array observatory in Chile went dark. A cyberattack had breached the computational systems of what many consider the world's most powerful radio telescope, forcing the facility to halt all astronomical observations and take its public website offline. The intrusion was swift enough that by the time staff realized what had happened, the damage was already done—or so it seemed.

What made this breach particularly alarming was its scope. The attackers didn't just compromise a single server or a handful of workstations. They penetrated deeply enough to disable email systems across the entire institution, leaving employees unable to communicate through their standard channels. For a research facility that depends on seamless coordination between teams across multiple continents, that kind of disruption cuts to the heart of operations.

Yet as the initial shock wore off and investigators began assessing the damage, a clearer picture emerged. The 66 massive antennas that form ALMA's core—each nearly 12 meters in diameter—remained untouched and operational. More critically, the scientific data that researchers had spent years collecting, the observations that represent millions of dollars in equipment time and intellectual labor, had not been accessed or corrupted. The attack, for all its disruption, had been contained to the administrative and computational infrastructure. No instruments were damaged. No research was lost.

ALMA itself is not just another telescope. Its construction began in 2003, and when scientific observations finally commenced in 2011, the facility opened a new window onto the coldest regions of the universe—the places where stars and planets are born, where galaxies collide and merge. In 2019, ALMA played a crucial role in producing the first-ever photograph of a black hole, an achievement that made headlines around the world and vindicated decades of theoretical work. This is the kind of facility that shapes how humanity understands its place in the cosmos.

The observatory's leadership moved quickly to contain the situation. Within hours of the attack, they issued a statement confirming that the threat had been neutralized and that restoration efforts were underway. Email services, they noted, were being brought back online in limited capacity. Specialists were working around the clock to rebuild the compromised systems. The tone was measured, professional—the response of an institution that had weathered a serious blow but was confident in its ability to recover.

What remained mysterious was the attacker's identity and intent. No hacker group stepped forward to claim responsibility. No ransom demand appeared. No manifesto explained the motivation. Chilean authorities launched an investigation, but as of the time this breach became public, investigators had few leads and fewer answers. Was this a probe by a state actor? An attempt at industrial espionage? A test of the facility's defenses by someone with a grudge? The silence was itself a kind of puzzle.

As ALMA's teams worked to restore their systems, the broader question hung in the air: if the world's most powerful radio telescope could be knocked offline by a cyberattack, what other critical scientific infrastructure might be vulnerable? The answer, almost certainly, was that ALMA was not alone.

The threat was contained and specialists were working to restore affected systems; the attack did not compromise the antennas or scientific data
— ALMA observatory statement
The Hearth Conversation Another angle on the story
Inventor

Why would anyone target a telescope? What's the value in disrupting astronomical research?

Model

That's the question no one can answer yet. It could be espionage—ALMA's data and methods are valuable. It could be testing security. Or it could be random, just picking a high-profile target to prove a point.

Inventor

But they didn't steal the data. They didn't even touch the antennas. So what did they actually accomplish?

Model

Disruption itself. They shut down observations for days, maybe weeks. For a facility that operates on a global schedule with researchers waiting for telescope time, that's significant damage even if nothing was destroyed.

Inventor

The fact that no one claimed it is strange, isn't it?

Model

Very. Usually, attackers either want ransom, or they want credit. The silence suggests either they were caught before they could make demands, or this was something more exploratory—someone testing whether they could get in.

Inventor

And could they? Could they have done worse?

Model

Almost certainly. They got deep enough to compromise email across the entire institution. If they'd wanted to, they could have tried for the scientific data. The fact that they didn't suggests either they were interrupted, or that wasn't their goal.

Contact Us FAQ