Elche Municipal Company Says AI-Assisted Attack Exposed Bicielx User Data

Summary

Pimesa says an attack on its Bicielx platform exposed some users’ personal data but did not interrupt service. The suspected attacker reportedly admitted involvement and was referred to judicial authorities.

Key points

• The attack on Pimesa’s Bicielx platform took place on September 3 and involved manual checks, automated processes, and an AI agent that adapted its actions to results.
• Pimesa says its IT team stopped the attack before service was disrupted and restored altered data before users noticed anomalies.
• The incident exposed personal data belonging to some users; Pimesa says it will notify affected individuals.
• The suspected attacker reportedly admitted involvement, offered to assist with the analysis, and was referred to judicial authorities after a complaint was filed.
• Pimesa reported the incident to relevant data-protection and cybersecurity authorities and the National Police.
• After correcting the vulnerability that enabled the attack, Pimesa began strengthening Bicielx security, including plans for a dedicated web-applications server, two-factor authentication, and an external audit.

Products