Spain Archives - ICSSTRIVE

Ransomware Attack at Spain’s Port of Vigo

March 24, 2026

Spain’s Port of Vigo in Galicia suffered a ransomware attack last week that forced officials to disconnect parts of its network and switch cargo handling to manual processes which meant physical ship movement could continue without digital communication.
The attack occurred Tuesday March 25 at 5:45 a.m. when port authority staff at the Port of Vigo discovered ransomware had encrypted servers managing cargo traffic and digital services. Equipment ended up locked and a ransom demand followed. So far, no cybercrime group claimed responsibility.
As a result of the attack, the port’s technology team isolated all affected systems from external networks. Port President Carlos Botana said connections would not be restored until there were absolute guarantees of safety, with no estimated timeline for recovery.

Data Breached at Telefónica, a Spanish Telecommunications Company

January 10, 2025

Spanish telecommunications company Telefónica confirms an internal ticketing system was breached after a Telefónica Jira database was leaked on a hacking forum. .In an email to BleepingComputer today, Telefónica confirmed its ticketing system was breached and are investigating the incident.

Three people behind this attack, Grep, Pryx, and Rey, are also members of a recently launched ransomware operation known as Hellcat Ransomware.

Cyberattack on Mobile Phone Provider Orange in Spain

January 3, 2024

The Spanish unit of telecommunications operator Orange suffered a cyberattack on Wednesday that affected an undisclosed number of customers who could not access certain websites, a company spokesman said.

In a message on social media platform X, the French company stated that customers’ data was not at risk.

Geopost Reports Cybersecurity Incident

June 13, 2024

Geopost announces having identified a cybersecurity incident consisting of a recent unauthorized access to a database operated by its subsidiary in Spain. After becoming aware of the incident, the company proactively informed the National Cybersecurity Institute (INCIBE) and the Spanish Data Protection Agency (AEPD), for the appropriate purposes, and promptly began an investigation with the assistance of cybersecurity experts

Ransomhub Targets SCADA System of Spanish Meat Processing Plant

May 18, 2024

Ransomhub, claimed an attack on the Spanish Abattoir, Matadero de Gijón. The Ransomhub ransomware group claimed unauthorized access to the plant’s Supervisory Control and Data Acquisition (SCADA) system, which is critical for industrial process control.

La Nueva Espana reports that the alleged “hacking” of the computer that controls the water purification of the Matadero de Gijón plant forced operations to shut down. Workers were sent home and more than 40 cattle stopped being slaughtered. Operations resumed through manual control of the treatment plant.

Spanish Energy Giant Hit by Cyberattack

May 6, 2024

On May 7, Iberdrola detected unauthorized access to customer databases through a supplier. Specifically, it affected 850,000 customers in Spain (600,000 from Iberdrola customers and 250,000 from Curenergia), from whom the data of name, surname, ID and contact information were obtained. Iberdrola denies that financial data has been compromised and claims to have notified all those affected.

Large Data Breach at Iberdrola Energy Company affects 1.3 Million Customers

March 15, 2022

Iberdrola, Spain’s largest energy company, suffered a cyberattack on March 15. The attack compromised the personal data of 1.3 million customers, according to Eldiario.es and confirmed by company sources to EL PAÍS. The company denies that users’ financial or consumer data has been compromised, although it admits that it did reveal their name, ID, address and telephone number.

Databreach at TotalEnergies exposes over 200,000 Customers

July 3, 2024

TotalEnergies Clientes SAU has reported a significant cyberattack that has compromised the personal data of 210,715 customers. “The company is collaborating with the Police and the Spanish Data Protection Agency “to initiate all relevant legal actions against those responsible for this action.”

The incident has raised serious concerns about data security and the integrity of digital infrastructures in the energy sector.

Ransomhouse Extortion Group Paralyzes Barcelona Hospital Operations.

March 6, 2023

A cyberattack has targeted one of Barcelona’s leading hospitals, shutting down its computer system and forcing the cancellation of 150 non-urgent operations and up to 3000 patient checkups. The hospital’s SAP system wasn’t impacted, but all applications and communications remain broken as work to restore critical systems continues. This means that patient information for physicians is out of reach, and the situation impacts care services.

In addition to the cancellations mentioned above, the hospital delayed 800 urgent cases and diverted patients to other hospitals.

Cyberattack at Drug Distributor Alliance Healthcare Impacts Pharmacies in Spain.

March 17, 2023

A cyberattack on one of the main distributors of Catalan pharmacies, Alliance Healthcare, is disrupting medicines supplies, according to the Spanish daily ‘El País.’ A week later, the company’s website is still completely inaccessible. Alliance Healthcare’s billing systems and ordering processes are also in utter chaos, El País’ sources said. Outages led to supply delays, with pharmacies across the northeastern Catalonia region seeing the biggest impact.

While the affected company is one of the leading distributors to Catalan pharmacies, the industry has been able to cope with medicines supplies as they work with different distribution companies.

« Older Entries