The Migration Agency (DGM) confirmed a cybersecurity incident.
The DGM said in a statement that agency officials are working closely with the National Cybersecurity Center on the implementation of remediation measures.
The DGM reported a “cybersecurity incident” by cybercriminals in which unauthorized data from that entity’s database was exposed, compromising names, addresses and dates of birth.
According to a statement issued by that institution, the operations and data encryption of the DGM “have not been compromised.” “A data breach was confirmed that may include names, addresses and dates of birth; however, the institution’s operations and data encryption have not been compromised,” stated the entity.
DGM said the incident occurred on 14 September 2023, when anomalies were first detected in the systems and the National Cybersecurity Center was contacted for support. The Migration Agency indicates they are collaborating diligently with the authorities to determine the scope of the infiltration and to take measures to mitigate the impact and protect the privacy of those affected.
“Since the detection, we have collaborated with the National Cybersecurity Center to implement remediation measures, strengthen controls and monitor possible anomalous activities. We reiterate our commitment to being transparent and keeping the community informed about any relevant developments in relation to this incident,” the statement concludes.
Diario Libre attributes the attack to Rhysida ransomware. Diario Libre explains that this group, that emerged in late May of 2023, has quickly gained notoriety for its large-scale attacks.
Diario Libre reports that Rhysida is linked to Vice Society, one of the most active and aggressive ransomware groups as of 2021, primarily targeting the education and healthcare sectors, and is said to be responsible for the attack on the Los Angeles Unified School District in California, USA.
Read more:
Diario Libre
Diario Libre
Listin Diario
Trend Micro
5 October 2023