Cyber Incident Victim: Diputación de Gipuzkoa
Date:
Mar 2025
Location:
Spain
Summary
TheGipuzkoako Foru Aldundia reported a cyberattack that disrupted its online services and also affected the websites of several neighboring municipalities. The attack rendered the municipal portal of Irún inaccessible for several hours, while the sites of Donostia and Hondarribia experienced intermittent issues before being restored. Officials confirmed that the incident was contained and normal operations resumed after technical teams intervened.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On Wednesday, 5 March 2025, the Ayuntamiento de Irún detected a generalized cyberattack that targeted, among other administrations, its municipal website, causing the site to be paralyzed for several hours. The Cyberzaintza confirmed the attack and notified the municipality’s technical staff. In response, the Municipal IT Service began working immediately to resolve the issue and managed to restore the municipal website by the afternoon, although normal functionality was not fully recovered. Despite the restoration effort, the website continued to exhibit problems around 18:00 hours. The outage disrupted the municipality’s electronic office services.
During the same day, the Diputación de Gipuzkoa, the Ayuntamiento de Donostia and the Ayuntamiento de Hondarribia also reported experiencing technical problems related to the cyber incident. By the end of Wednesday, the websites of these three entities had returned to normal operation. The Diputación de Gipuzkoa stated that the attack had affected several public administrations but had been neutralized, noting that such incidents occur regularly. According to the Diputación, its web portal was unavailable for less than five minutes before control systems restored service.
Because the technical difficulties could have interfered with the processing of administrative procedures through the municipal electronic office, the Ayuntamiento de Irún approved an extension of all deadlines that were set to expire on Wednesday until 23:59 on Thursday. This decision was communicated via Europa Press. The incident is described as a generalized cyberattack directed at multiple public administrations, with the municipal website of Irún being the most prominently affected service.