Ransomware Disrupts Digital Systems at Spain’s Port of Vigo

Summary

A ransomware attack disrupted cargo-management and other digital systems at Spain’s Port of Vigo. Officials isolated affected servers, shifted some logistics to manual processes, and reported a ransom demand; the access method and any data compromise remain under1a16

Key points

The attack, detected early Tuesday, affected servers used for cargo traffic and other digital services.
Port technology staff isolated affected systems from external networks.
Ship movements and cargo handling continue, while some logistics coordination relies on manual procedures and paper documentation.
Port president Carlos Botana said systems will not be reconnected until officials are confident the network is secure; no restoration timeline was given.
An investigation is examining how attackers gained access and whether sensitive data was compromised.
Officials reported a ransom demand, but no cybercrime group has claimed responsibility.

Article Details

Victim Organization: Port of Vigo
Incident Type: Ransomware attack disrupting digital systems
Operational Impact: Servers used to manage cargo traffic and other digital services were affected and isolated from external networks. Physical port operations continued, while logistics coordination shifted to manual procedures and paper documentation. The timeline for restoring normal digital operations was not estimated.
Ransom Or Extortion: Officials reported a ransom demand. No payment or ransom amount was reported.
Claim Status: confirmed

People

Carlos BotanaPort president who commented on the incident, saying systems would not be reconnected until security teams were certain the network was safe.

Threat Actors

LockBitThe article attributes a 2023 ransomware attack on Japan’s Port of Nagoya to LockBit; it reports that no cybercrime group has claimed responsibility for the attack on the Port of Vigo.

Countries

JapanIn 2023, Japan’s Port of Nagoya temporarily suspended operations following a ransomware attack attributed to the LockBit cybercrime group.SpainA ransomware attack disrupted digital systems at Spain’s Port of Vigo, forcing authorities to disconnect parts of the network and manage cargo operations manually.