Cyber Incident Victim: Ministry of Science
Date:
Feb 2026
Location:
Spain
Summary
Spain's Ministry of Science partially shut down its IT systems after receiving claims of a cyberattack. The ministry described the disruption as a technical incident. The ministry did not confirm that an actual breach had occurred. The agency characterized the event as a technical incident. The ministry refrained from confirming that a breach had taken place.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 0 motives | 0 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On February 6, 2026, reports emerged that Spain's Ministry of Science had experienced a cybersecurity incident. The incident was documented in the BSafes Library article dated April 7, 2026. According to the article, the Ministry partially shut down its IT systems in response to the incident. The shutdown was described as partial, affecting only certain components of the Ministry's information technology infrastructure.

The Ministry indicated that the action was taken following claims of a cyberattack. Specifically, the Ministry cited a 'technical incident' as the reason for the system shutdown. The article notes that the Ministry did not confirm that a cyberattack had actually occurred. Instead, the official characterization remained a technical incident without attribution to malicious activity.
No further details about the scope of the shutdown, the systems affected, or the duration of the outage were provided in the source. Similarly, the source does not mention any specific attacker, ransomware group, or malware involved. The absence of confirmation leaves the nature of the incident unverified based on the available information. Thus, the known facts are limited to the partial IT system shutdown and the Ministry's statement of a technical incident.
