Ransomware Attack at Spain’s Port of Vigo

Spain’s Port of Vigo in Galicia suffered a ransomware attack last week that forced officials to disconnect parts of its network and switch cargo handling to manual processes which meant physical ship movement could continue without digital communication.
The attack occurred Tuesday March 25 at 5:45 a.m. when port authority staff at the Port of Vigo discovered ransomware had encrypted servers managing cargo traffic and digital services. Equipment ended up locked and a ransom demand followed. So far, no cybercrime group claimed responsibility.
As a result of the attack, the port’s technology team isolated all affected systems from external networks. Port President Carlos Botana said connections would not be restored until there were absolute guarantees of safety, with no estimated timeline for recovery.

Estimated Cost

Unknown at this time

Threat Source

Impacts

OT IT