Find notable cyber news and cases, enriched with sources, timelines, and signals.

Ministerio de Ciencia Innovación y Universidades hit by cyberattack

Incident
First reported
Last updated
Happening score
H score 22
1 unique sources, 1 articles

Summary

Hide ▲

The Ministry of Science, Innovation and Universities partially closed its electronic headquarters after a technical incident under assessment, disrupting citizen- and company-facing services. The ministry also suspended ongoing administrative procedures, affecting work for researchers, universities, and students. Officials said deadlines for impacted procedures will be extended, reducing immediate administrative fallout. The event matters because it temporarily cut access to a key Spanish government service surface while the cause remained unresolved.

Related Happenings

Ministerio de Ciencia, Innovación y Universidades alleged data leak

Data Leak
First: 05.02.2026 23:23 Last: 05.02.2026 23:23 Sources 1

How related: The alleged hacker leaked on underground forums data samples that include personal records, email addresses, enrollment applications, and screenshots of documents and other official paperwork.

About this happening: A threat actor posted **alleged data samples** tied to **Ministerio de Ciencia, Innovación y Universidades**, creating exposure risk for sensitive citizen, university, and student...

Timeline

  1. 05.02.2026 23:23 1 articles · 3mo ago

    Spain's Ministry of Science announces partial IT shutdown

    Initial Disclosure

    The Ministry of Science, Innovation and Universities partially closed its electronic headquarters after a technical incident under assessment, suspending ongoing administrative procedures, disrupting citizen- and company-facing services, and extending deadlines for affected procedures under Article 32 of Law 39/2015. The same-day reporting also included a threat actor alias, GordonFreeman, claiming a breach of the ministry's systems, alleging exploitation of a critical Insecure Direct Object Reference (IDOR) vulnerability to obtain full-admin-level access, and posting alleged data samples as proof.

    Show sources