Ransomware Attack Disrupts Romania’s Prison Administration Systems

Summary

Romania’s prison administration says ransomware hit its workstations and servers on July 29, 2026. Equipment was isolated, some services were suspended, and IT teams are investigating and working to restore operations.

Key points

• The National Administration of Penitentiaries (ANP) said ransomware targeted multiple workstations and servers on July 29, 2026.
• ANP’s IT team contacted the National Directorate for Cyber Security (DNSC); affected equipment was physically isolated.
• ANP and DNSC specialists are working on remediation and investigating the attack; ANP said it planned to file a complaint with DIICOT.
• ANP temporarily suspended services including IMS Web, Infokiosk, phone services for incarcerated people, visit scheduling, inter-site VPN connections, and its website at www[.]anp[.]gov[.]ro.
• Prisoner transfers were halted except for exceptional cases; court appearances were to proceed as scheduled that day, with videoconferencing planned for following days.