Concello de Cangas

The Concello de Cangas, also known as Cangas Municipality, is the local government body responsible for the administration and governance of the municipality of Cangas in Spain. As a municipal entity, it is responsible for local governance and the administration of public affairs within its jurisdiction. This includes managing municipal operations, employing staff, and handling financial transactions such as employee salary payments. Its scope is limited to the residents of Cangas, operating under Spanish local government structures to deliver essential administrative functions at the community level. The organization functions as a public institution, tasked with implementing local regulations and maintaining services that directly affect the daily lives of its citizens. Its authority is derived from national and regional Spanish laws governing municipal competencies. The municipality's core purpose revolves around providing localized public administration and ensuring the continuity of essential civic processes for its population.

In April 2023, the Concello de Cangas experienced a significant cybersecurity incident when it was targeted by a ransomware attack attributed to the Lockbit criminal group. The attack resulted in the encryption of critical data and backup systems, which severely disrupted municipal operations and prevented the organization from processing employee salary payments amounting to approximately half a million euros. The destruction of data and backups crippled the municipality's ability to function normally, prompting an investigation by Spanish authorities including the Guardia Civil and the National Intelligence Centre (CNI). Investigators noted the sophisticated level of encryption used by the attackers, highlighting the advanced nature of the threat. This incident placed the Concello de Cangas among local public institutions that have faced similar cyber threats, underscoring the vulnerability of municipal governments to ransomware campaigns. The encryption of data and backups had a severe impact on the municipality's administrative functions, as documented in the official investigation. The attack represented a major disruption to the organization's core operational capacity, affecting its fundamental role in local governance and financial management.