Cyber Incident Victim: City of Seraing
Date:
Feb 2021
Location:
Belgium
Summary
The City of Seraing experienced a disruptive cyberattack that rendered its services temporarily inaccessible to the public due to a malicious compromise of its computer network. The incident caused widespread operational failures impacting all municipal services, prompting the filing of an official complaint. IT specialists worked intensively to restore network functionality, though full recovery had not yet been achieved at the time of reporting.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
The City of Seraing, Belgium, experienced a disruptive cyber attack that compromised its entire computer network around February 11, 2021. The incident rendered municipal services temporarily inaccessible to the public, with the city confirming the outage resulted from external malicious activity beyond its control. Officials filed a formal complaint following the attack, acknowledging the severity of the network failure that impacted all municipal operations. Technical teams identified the attack as the root cause of the widespread service disruption, which began affecting systems no later than February 11 based on restoration timelines. The attack's timing coincided with reports of network issues emerging publicly during the preceding weekend, though precise intrusion timelines weren't disclosed.
Municipal IT specialists initiated emergency response measures starting Thursday, February 11, working continuously to restore network functionality and resume normal operations. Restoration efforts remained incomplete as of February 12, with reports indicating the network had not yet achieved full operational recovery. The comprehensive network outage affected all city services, though specific departmental impacts weren't detailed beyond the universal accessibility issues. No data theft or ransomware elements were mentioned in initial reports, with focus remaining on service restoration rather than attacker attribution. The city maintained public communication regarding the operational disruptions while technicians prioritized infrastructure recovery without specifying containment methodologies or forensic findings.