Overview

• Hackers encrypted municipal systems, halting administrative procedures for roughly 243,000 residents and demanding a ransom.
• The ransom note is under review by the Policía Nacional, which has opened a probe with Europol into this incident and similar recent attacks.
• Mayor Pablo Ruz convened the crisis committee, suspended his vacation, and signed payroll and Social Security payments by hand, with a method for paying suppliers to follow.
• An external cybersecurity firm is assisting city staff alongside the regional Centro de Seguridad TIC and Spain’s Centro Criptológico Nacional, with CCN specialists on site.
• A phased recovery has begun by cleaning computers one by one, administrative deadlines are suspended, and local reporting suggests restoration could take weeks based on a recent comparable case.