Breaches and incidents

Comunidade Intermunicipal da Regiao de Leiria (Portugal): ransomware on intermunicipal email server, data recovered from backups

Per DN/Lusa, executive secretary Paulo Santos said a ransomware attack on the CIM’s email server was identified in the early hours of 15 September.

Disclosed
Verification
Reported by a reputable outlet, citing the company

What happened

  • Per DN/Lusa, executive secretary Paulo Santos said a ransomware attack on the CIM’s email server was identified in the early hours of 15 September; the server was isolated and all data up to the moment of infection was recovered.
  • Root cause: not disclosed.
  • No attacker named.
  • Santos said the cybersecurity and triple-backup system serving the 10 municipalities “worked fully”, only Porto de Mos remained without email as a precaution, and the incident was reported to the authorities.