Investigation Into Ransomware Attack on Cugir City Hall Systems Closed

Summary

A ransomware attack disrupted Cugir City Hall’s public-transport systems. The city recovered databases from an older backup and restored normal operations by February 1, 2025; investigators did not identify the attackers, and the case was closed.

Key points

• The ransomware attack affected the information system of Cugir City Hall’s public-transport department.
• The city did not comply with the attackers’ ransom demand.
• With help from the IT firm managing the transport application, the city restored databases from an older backup and brought them up to date over several weeks.
• The affected activity returned to normal on February 1, 2025.
• The city representative could not say how the attackers gained unauthorized access or which vulnerability they exploited.
• The new server had antivirus installed, and the city intended to acquire cybersecurity services.
• DIICOT investigators could not identify who attacked the system; the Alba Tribunal approved the prosecutor’s request to close the case.