Indra: Indra maintains its services after a minimal cyberattack

Indra Contained Ransomware Attack on Subsidiary, Ensuring Service Continuity

Spanish technology and defense firm Indra confirmed that one of its subsidiaries was targeted in a ransomware attack on Wednesday. Upon detecting the incident, the company’s Computer Security Incident Response Team (CSIRT) swiftly activated internal protocols to analyze, verify, and secure potentially compromised environments.

Indra reported that the attack was contained, with no spread to other group companies, and operations remained unaffected throughout. The CSIRT determined the breach was "minimal and limited to a non-critical environment," allowing for immediate containment, eradication, and recovery measures. Additional security controls were reinforced to safeguard systems and maintain service continuity.

The company is conducting an in-depth investigation to identify the attack’s origin while reviewing and strengthening its cybersecurity controls to enhance protection for clients. No further details on the ransomware strain or threat actors have been disclosed.

Source: https://www.democrata.es/en/economy/indra-ensures-the-continuity-of-its-services-after-a-ransomware-cyberattack-on-a-subsidiary/

Indra TPRM report: https://www.rankiteo.com/company/indra

"id": "ind1782923647",
"linkid": "indra",
"type": "Ransomware",
"date": "7/2026",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"

{'affected_entities': [{'industry': 'Technology and Defense',
                        'location': 'Spain',
                        'name': 'Indra (Subsidiary)',
                        'type': 'Subsidiary'}],
 'date_detected': '2023-11-01',
 'date_publicly_disclosed': '2023-11-01',
 'description': 'Spanish technology and defense firm Indra confirmed that one '
                'of its subsidiaries was targeted in a ransomware attack. The '
                'attack was contained with no spread to other group companies, '
                'and operations remained unaffected. The breach was minimal '
                'and limited to a non-critical environment.',
 'impact': {'operational_impact': 'None',
            'systems_affected': 'Non-critical environment'},
 'investigation_status': 'Ongoing',
 'post_incident_analysis': {'corrective_actions': 'Additional security '
                                                  'controls reinforced'},
 'recommendations': 'Review and strengthen cybersecurity controls to enhance '
                    'protection for clients',
 'references': [{'date_accessed': '2023-11-01',
                 'source': 'Indra Public Disclosure'}],
 'response': {'containment_measures': 'Immediate containment, eradication, and '
                                      'recovery measures',
              'incident_response_plan_activated': 'Yes',
              'recovery_measures': 'Systems secured and service continuity '
                                   'maintained',
              'remediation_measures': 'Additional security controls '
                                      'reinforced'},
 'title': 'Ransomware Attack on Indra Subsidiary',
 'type': 'Ransomware'}