Cyber Incident Victim: Balearic Islands
Date:
Jul 2024
Location:
Spain
Summary
A cyberattack disrupted access to 37 municipal websites in the Balearic Islands, including Manacor and Santanyí, after attackers attempted to overwhelm one site with excessive traffic. The affected pages were temporarily taken offline as a precautionary measure before being fully restored.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On July 22, 2024, a cyberattack disrupted access to municipal websites across Mallorca in Spain's Balearic Islands. The incident involved 37 local government websites, including those of Manacor and Santanyí, which became inaccessible to the public. The Island Council (Inselrat), responsible for managing these sites, proactively took them offline as a security precaution following detection of malicious activity. Initial analysis indicated attackers attempted to overwhelm at least one website through an unusually high volume of access requests, characteristic of a distributed denial-of-service (DDoS) attack aimed at disrupting service availability. This action caused widespread access issues for residents and visitors attempting to use municipal online services.
Technical teams worked to restore functionality, with all affected websites returning to normal operation by July 23, 2024. The restoration process occurred within approximately 24 hours of the initial disruption, though the exact timeframe for complete mitigation remains unspecified in available reports. No data breaches, ransomware deployment, or permanent damage to digital infrastructure were confirmed in the immediate aftermath. The incident primarily impacted public access to informational portals and municipal services, though specific operational consequences beyond temporary unavailability weren't detailed. The Island Council maintained oversight throughout the response without referencing external cybersecurity assistance or law enforcement involvement in public communications. Service normalization concluded the incident's active phase with no further disruptions reported at the time of coverage.