CSIDB logo
Incident

SegurCaixa Adeslas

Incident posture

Attack window
Sep 2020
Location
Spain
Status
Historical
CIA posture
Available to members
Updated
2025-10-28 00:00

Linked entities

Victim
SegurCaixa Adeslas
Threat actors
0 actors
Sources
1 source

Timeline

Occurred
Sep 2020
Discovered
Pending
Disclosed
Pending
Resolved
Pending

Summary

SegurCaixa Adeslas experienced a ransomware attack compromising its computer systems, prompting activation of its contingency and incident response plans. The insurance entity, jointly owned by Mutua Madrileña and VidaCaixa Grupo, implemented measures to mitigate operational disruptions following the cybersecurity incident.

Motives

Detailed motive labels are available to members.

2 motives

TTPs

Detailed technique labels are available to members.

1 technique

Description

On or around September 10, 2020, SegurCaixa Adeslas, a Spanish insurance company jointly owned by Mutua Madrileña (50.01%) and VidaCaixa Grupo (49.9%), experienced a ransomware attack targeting its computer systems. The attack prompted the organization to activate its predefined contingency plan as part of its incident response protocol. This action was publicly confirmed by the company through a statement reported by Europa Press, though no technical specifics regarding the ransomware variant, initial attack vector, or precise timing of the intrusion were disclosed. The activation of the contingency plan indicated an operational disruption severe enough to warrant emergency measures, though the company did not elaborate on the scope of affected systems or services. No explicit details were provided regarding data exfiltration, encryption of systems, or ransom demands at the time of the initial disclosure.

The incident represented a significant cybersecurity event for the jointly owned insurer, necessitating immediate containment efforts through its contingency framework. SegurCaixa Adeslas did not release information about the duration of system unavailability, recovery timelines, or whether third-party cybersecurity firms were engaged to assist with remediation. The absence of public statements regarding customer data compromise or regulatory notifications suggested the company either contained the incident before sensitive data was accessed or was still investigating potential impacts at the time of reporting. The activation of the contingency plan remained the primary confirmed response action, with no further operational or financial consequences detailed in the immediate aftermath. The company’s ownership structure was noted in coverage, but no statements from Mutua Madrileña or VidaCaixa Grupo regarding the incident’s broader implications were referenced.

Sources

Sources available to members: 1 source.

CSIDB