Região Norte

Profile narrative

Região Norte is an organisation whose headquarters are located in Portugal. It is publicly referenced by the alias Região Norte. The organisation has been linked to two significant cyber incidents that were reported in open sources.

On 26 September 2024, a cyberattack targeted a state administrative modernization agency, disrupting multiple government digital platforms and services and rendering them inoperable. The incident affected various portals and systems, although authorities later reported that most functionalities had been restored. International forensic audit teams were engaged to conduct an ongoing investigation into the breach. No further details about the organisation's direct role in the agency were disclosed in the available sources.

On 27 September 2023, a cyberattack struck a Portuguese municipality, described as the largest on a public institution in the country at that time. The ransomware incident encrypted data, caused extensive operational disruption, and required an estimated €1.5 million in recovery investments. Attackers gained access via a Russian server, demanded a ransom of €750 000, which was not paid due to legal constraints and official advisories. Stolen sensitive data, including citizen identifiers and financial records, was leaked on the dark web, forcing a temporary shift to paper‑based operations while the intrusion’s duration and motives remain under investigation.

Incidents

2 incidents linked to this organisation.