Ransomware Attack Disrupts Port of Vigo’s Cargo-Management Systems

Summary
The Port of Vigo reported a ransomware attack that disrupted cargo-management servers and online services. Physical port operations continued, while some users switched to paper procedures; no restoration date was available as forensic analysis began.
Key points
- The Port of Vigo detected a cyberattack early Tuesday that affected cargo-traffic management.
- The article reports the Port Authority was hit by ransomware; no attacker was identified, and data theft was not reported.
- The IT team said it neutralized the attack but isolated port systems from external systems, interrupting digital services.
- Servers and services accessed through the port website were affected, but physical port operations continued, according to the port president.
- With no estimated restoration date, some users, including the Border Inspection Post, were advised to use paper records.
- The port said it would keep programs offline until security checks were complete; a forensic analysis was underway.
Article Details
- Victim Organization
- Puerto de Vigo
- Incident Type
- Ransomware cyberattack that affected servers and digital services.
- Incident Date
- 2026-03-24
- Disclosure Date
- 2026-03-25
- Operational Impact
- The port isolated its systems from external networks and took digital services and the port website offline. This disrupted digital management of cargo traffic and terminal work; some users were directed to use paper records. The article says physical port operations and operational services were not affected.
- Ransom Or Extortion
- No ransom demand, data theft, or extortion claim specific to this incident was reported.
- Claim Status
- confirmed
