Caja Rural de Castilla-La Mancha

Globalcaja operates under the alias Caja Rural de Castilla-La Mancha and is headquartered in Spain. As a rural savings bank, it is a cooperative financial institution that serves the Castilla-La Mancha region. The entity provides banking and financial services to private individuals, businesses, and possibly local public entities. Its core activities include accepting deposits, extending credit, and facilitating payments. Being part of the Spanish caja rural network, it adheres to the cooperative banking model prevalent in the country.

On 31 May 2023, Globalcaja experienced a ransomware attack attributed to the Play group. The attackers claimed to have exfiltrated confidential data, including client and employee documents, passports, and contracts. The bank confirmed that the incident affected several local office workstations. Despite the infection, Globalcaja stated that its transactional systems, client accounts, electronic banking platforms, and ATMs continued to operate normally. As a precaution, the institution disabled some affected workstations and temporarily limited certain internal operations. The bank worked to restore normal operations while investigating the breach with external cybersecurity experts. No evidence was presented in the public sources that core banking services were disrupted or that customer funds were compromised.