Cyber Incident Victim: Hondarribia
Date:
Mar 2025
Location:
Spain
Summary
TheAyuntamiento de Irún experienced a widespread cyberattack that disabled its municipal website for several hours, prompting local IT staff to work on restoration and eventually bring the service back online by the afternoon. The attack also affected the electronic administration portal, leading the council to extend related deadlines until the following evening. The Diputación de Gipuzkoa, along with the town halls of Donostia and Hondarribia, reported similar disruptions but confirmed that their sites returned to normal operation shortly afterward, with Cyberzaintza stating the incident had been neutralized.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 0 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On Wednesday, March 5,2025, the Ayuntamiento de Hondarribia reported that its municipal website experienced technical difficulties as part of a broader cyberattack affecting several public administrations in the Gipuzkoa region. The difficulties were noted alongside similar issues reported by the Diputación de Gipuzkoa and the Ayuntamiento de Donostia. Hondarribia’s online services were disrupted, which impacted access to the municipal electronic headquarters and any procedures being processed through that channel. The article does not specify the exact length of the outage for Hondarribia or the precise time when the disruption began. By the end of the day, the municipal website of Hondarribia had returned to normal operation, as confirmed by the Diputación de Gipuzkoa.
The Diputación de Gipuzkoa stated that the cyberattack had targeted multiple administrations but had been neutralized, noting that the affected web pages were down for less than five minutes and that control systems had functioned to restore normality. Cyberzaintza confirmed the attack and indicated that it had been in contact with the relevant technicians to manage the incident. In the neighboring municipality of Irún, the town hall’s website was paralyzed for several hours, with service restored by the afternoon, although residual problems persisted around 18:00. As a consequence of the disruption, the Ayuntamiento de Irún decided to extend administrative deadlines for procedures expiring on that day until 23:59 on Thursday, March 6, 2025. No further details about the attack’s origin, methods, or any data compromise were provided in the source material.