Indra Says Ransomware Incident at Subsidiary Was Limited to a Non-Critical Environment

Summary
Indra said a subsidiary was targeted in a ransomware incident limited to a non-critical environment. The company reported that services remained operational and that its CSIRT activated response measures while investigating.
Key points
- Indra reported that a subsidiary was targeted in a ransomware incident.
- The company described the incident as minimal and limited to a non-critical environment.
- Indra said the incident did not spread to the rest of the group and services remained operational.
- The company's CSIRT activated analysis and verification protocols; containment, eradication, and recovery measures were applied.
- Indra is investigating the incident's origin and strengthening cybersecurity controls.
Article Details
- Victim Organization
- Indra
- Victim Domain
- indracompany.com
- Incident Type
- Ransomware attack targeting an unnamed subsidiary in a non-critical environment
- Disclosure Date
- 2026-06-24
- Operational Impact
- Indra reported that services remained secure and fully operational, the incident was limited to a non-critical environment, and the risk did not spread to the rest of the group. Containment, eradication, and recovery measures were applied; the investigation is ongoing.
- Ransom Or Extortion
- Not disclosed
- Claim Status
- confirmed
