Cyber Incident Victim: SegurCaixa Adeslas
Date:
Sep 2020
Location:
Spain
Summary
SegurCaixa Adeslas experienced a ransomware attack compromising its computer systems, prompting activation of its contingency and incident response plans. The insurance entity, jointly owned by Mutua Madrileña and VidaCaixa Grupo, implemented measures to mitigate operational disruptions following the cybersecurity incident.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On or around September 10, 2020, SegurCaixa Adeslas, a Spanish insurance company jointly owned by Mutua Madrileña (50.01%) and VidaCaixa Grupo (49.9%), experienced a ransomware attack targeting its computer systems. The attack prompted the organization to activate its predefined contingency plan as part of its incident response protocol. This action was publicly confirmed by the company through a statement reported by Europa Press, though no technical specifics regarding the ransomware variant, initial attack vector, or precise timing of the intrusion were disclosed. The activation of the contingency plan indicated an operational disruption severe enough to warrant emergency measures, though the company did not elaborate on the scope of affected systems or services. No explicit details were provided regarding data exfiltration, encryption of systems, or ransom demands at the time of the initial disclosure.

The incident represented a significant cybersecurity event for the jointly owned insurer, necessitating immediate containment efforts through its contingency framework. SegurCaixa Adeslas did not release information about the duration of system unavailability, recovery timelines, or whether third-party cybersecurity firms were engaged to assist with remediation. The absence of public statements regarding customer data compromise or regulatory notifications suggested the company either contained the incident before sensitive data was accessed or was still investigating potential impacts at the time of reporting. The activation of the contingency plan remained the primary confirmed response action, with no further operational or financial consequences detailed in the immediate aftermath. The company’s ownership structure was noted in coverage, but no statements from Mutua Madrileña or VidaCaixa Grupo regarding the incident’s broader implications were referenced.
