Spanish lender Globalcaja faces massive ransomware attack

Globalcaja, a prominent financial institution based in Albacete, Spain, is facing a widespread ransomware attack that has impacted multiple offices.

With a vast network of over 300 branches spread across the country, Globalcaja caters to the financial needs of nearly half a million individuals, offering an array of banking services. Managing a substantial portfolio of consumer loans exceeding $4.6 billion, the institution employs approximately 1,000 staff members.

The notorious Play ransomware group has recently claimed responsibility for breaching the bank’s security, asserting that they have illicitly acquired a trove of undisclosed private and personal confidential data, including client and employee documents, passports, contracts, and more.

 

In response to the cyber attack, Globalcaja issued an official statement on Friday, confirming ransomware infiltration on computers within several local branches.

 

Globalcaja assures its clients that the recent ransomware attack has not impacted transactions, accounts, or agreements. The bank emphasised that its offices are fully operational, maintaining regular electronic banking services and functioning ATMs.

Taking immediate action, the institution implemented its established security protocols, temporarily disabling certain office posts and limiting operational capabilities. The bank remains committed to restoring normalcy and thoroughly analyses the incident, prioritising the utmost security measures.

While Globalcaja has not provided details on ransom payment, the company has refrained from commenting on such matters upon request. Apologies have been extended for any inconvenience caused to its valued customers.

The recent surge in ransomware incidents within the Spanish financial sector highlights the growing threat faced by the country’s institutions in 2023.

Spanish financial entities have long been prime targets for hackers, but the frequency of such attacks has intensified this year, causing significant disruptions. Notably, a hospital in Barcelona and a Spanish amusement park company fell victim to crippling ransomware attacks. The Play ransomware gang, initially targeting government entities in Latin America in July 2022, has gained notoriety for its destructive actions, including the recent high-profile attack on the City of Oakland, which took weeks to recover.

This cybercriminal group has also targeted the city of Lowell in Massachusetts and various companies across Europe, underscoring the global reach and impact of their malicious activities. The escalating wave of ransomware incidents calls for heightened cybersecurity measures and collaborative efforts to protect critical infrastructure and safeguard sensitive data.