In the course of the follow-up actions of the incident, it has been detected that, apart from the temporary loss of access to the information of the users - which is in the process of recovery -, confidentiality has been compromised of data
· From the very beginning, the Catalan Data Protection Authority (APDCAT) and the Cybersecurity Agency of Catalonia have been informed of the incident and the actions that are being carried out and are being worked on together with these organizations to define its scope and adopt the appropriate measures.
· The CSI has taken the appropriate corrective measures to resolve and mitigate its impact.
-Restore the system with a cloud copy service.
-Measures to avoid the impersonation of users of corporate information systems.
-Activate the contingency plan to maintain the assistance activity.
-Segmentation at network level, deployment of firewalls and other measures that have made it difficult for the attacker to move internally and have made it possible to limit the impact.
· Once the leakage of a small volume of data has been confirmed, and while the Cybersecurity Agency is analyzing it, professionals are recommended to pay special attention to possible information that may arrive via email or mobile terminals, to avoid possible impersonations.
· The Cybersecurity Agency of Catalonia is already working to minimize the impact of the publication of the data.
· The CSI will exercise all legal actions at its disposal with respect to those responsible for any misuse or disclosure of information that goes against the confidentiality of the information affected by the cyber attack.
