CSIDB logo
Incident

City of Seraing

Incident posture

Attack window
Feb 2021
Location
Belgium
Status
Historical
CIA posture
Available to members
Updated
2025-10-26 00:00

Linked entities

Victim
City of Seraing
Threat actors
0 actors
Sources
1 source

Timeline

Occurred
Feb 2021
Discovered
Pending
Disclosed
Pending
Resolved
Pending

Summary

The City of Seraing experienced a disruptive cyberattack that rendered its services temporarily inaccessible to the public due to a malicious compromise of its computer network. The incident caused widespread operational failures impacting all municipal services, prompting the filing of an official complaint. IT specialists worked intensively to restore network functionality, though full recovery had not yet been achieved at the time of reporting.

Motives

Detailed motive labels are available to members.

1 motive

TTPs

Detailed technique labels are available to members.

1 technique

Description

The City of Seraing, Belgium, experienced a disruptive cyber attack that compromised its entire computer network around February 11, 2021. The incident rendered municipal services temporarily inaccessible to the public, with the city confirming the outage resulted from external malicious activity beyond its control. Officials filed a formal complaint following the attack, acknowledging the severity of the network failure that impacted all municipal operations. Technical teams identified the attack as the root cause of the widespread service disruption, which began affecting systems no later than February 11 based on restoration timelines. The attack's timing coincided with reports of network issues emerging publicly during the preceding weekend, though precise intrusion timelines weren't disclosed.

Municipal IT specialists initiated emergency response measures starting Thursday, February 11, working continuously to restore network functionality and resume normal operations. Restoration efforts remained incomplete as of February 12, with reports indicating the network had not yet achieved full operational recovery. The comprehensive network outage affected all city services, though specific departmental impacts weren't detailed beyond the universal accessibility issues. No data theft or ransomware elements were mentioned in initial reports, with focus remaining on service restoration rather than attacker attribution. The city maintained public communication regarding the operational disruptions while technicians prioritized infrastructure recovery without specifying containment methodologies or forensic findings.

Sources

Sources available to members: 1 source.

CSIDB