<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:media="http://search.yahoo.com/mrss/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:dcterms="http://purl.org/dc/terms/" xmlns:atom="http://www.w3.org/2005/Atom"  xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[Ara in English - cyberattack]]></title>
    <link><![CDATA[https://en.ara.cat/etiquetes/cyberattack/]]></link>
    <description><![CDATA[Ara in English - cyberattack]]></description>
    <language><![CDATA[es]]></language>
    <ttl>10</ttl>
    <atom:link href="http://en.ara.cat:443/rss-internal" rel="self" type="application/rss+xml"/>
    <item>
      <title><![CDATA[The Godó Group suffers a cyberattack]]></title>
      <link><![CDATA[https://en.ara.cat/media/the-godo-group-suffers-cyberattack_1_5646119.html]]></link>
      <description><![CDATA[<p><img src="https://static1.ara.cat/clip/8df8c3f1-268d-4852-a4b7-5228b223ac63_16-9-aspect-ratio_default_0.png" /></p><p>The websites of the Godó Group suffered a cyberattack at 6:00 AM this morning, Thursday. The attack originated in German data centers, which took the portals offline, according to the Godó Group. Specifically, the following websites were affected for about an hour: <em>La Vanguardia</em>, <em>Mundo Deportivo, </em>RAC1 and RAC105.</p>]]></description>
      <dc:creator><![CDATA[Sílvia Marimon]]></dc:creator>
      <guid isPermaLink="true"><![CDATA[https://en.ara.cat/media/the-godo-group-suffers-cyberattack_1_5646119.html]]></guid>
      <pubDate><![CDATA[Thu, 12 Feb 2026 07:10:42 +0000]]></pubDate>
      <media:content url="https://static1.ara.cat/clip/8df8c3f1-268d-4852-a4b7-5228b223ac63_16-9-aspect-ratio_default_0.png" type="image/jpeg"/>
      <media:title><![CDATA[The Vanguardia website]]></media:title>
      <media:thumbnail url="https://static1.ara.cat/clip/8df8c3f1-268d-4852-a4b7-5228b223ac63_16-9-aspect-ratio_default_0.png"/>
      <subtitle><![CDATA[The attack originated in German data centers.]]></subtitle>
    </item>
    <item>
      <title><![CDATA[AI fuels cyber fraud]]></title>
      <link><![CDATA[https://en.ara.cat/society/ai-fuels-cyber-fraud_1_5634837.html]]></link>
      <description><![CDATA[<p><img src="https://static1.ara.cat/clip/afbbe1e2-081f-4ead-b70a-2aceed855458_16-9-aspect-ratio_default_0.jpg" /></p><p>Artificial intelligence (AI) is revolutionizing all spheres of our society, including cybersecurity. The use of this technology is making it increasingly... <a href="https://en.ara.cat/society/more-cyberattacks-but-less-severe-these-are-the-most-exposed-places_1_5364767.html" >cyber scams</a> These methods are becoming more credible, automated, and difficult to detect, as cybercriminals use them to create scams and phishing campaigns based on text, voice, or video that is virtually indistinguishable from legitimate content. "Anyone can become a victim of fraud or identity theft," warns Laura Caballero, director of the Cybersecurity Agency of Catalonia. Faced with these new threats, she argues that the best way to protect oneself is to strengthen prevention. Caballero proposes measures such as activating two-factor authentication—an identity verification system in which the user must pass two security checks before accessing an account or service—using strong passwords, and having tools to identify fraudulent messages, emails, or calls. According to data from the Cybersecurity Agency of Catalonia, 82.6% of emails with malicious links already use AI, and the agency predicts that by 2026, digital identity theft and scams based on this technology will increase.</p>]]></description>
      <dc:creator><![CDATA[ARA]]></dc:creator>
      <guid isPermaLink="true"><![CDATA[https://en.ara.cat/society/ai-fuels-cyber-fraud_1_5634837.html]]></guid>
      <pubDate><![CDATA[Sun, 01 Feb 2026 06:00:31 +0000]]></pubDate>
      <media:content url="https://static1.ara.cat/clip/afbbe1e2-081f-4ead-b70a-2aceed855458_16-9-aspect-ratio_default_0.jpg" type="image/jpeg"/>
      <media:title><![CDATA[A server in operation, in a company in Barcelona]]></media:title>
      <media:thumbnail url="https://static1.ara.cat/clip/afbbe1e2-081f-4ead-b70a-2aceed855458_16-9-aspect-ratio_default_0.jpg"/>
      <subtitle><![CDATA[The Cybersecurity Agency of Catalonia warns that password thefts have doubled.]]></subtitle>
    </item>
    <item>
      <title><![CDATA[Ayuso, Puente or the Lehendakari, among the victims of a leak of politicians' personal data]]></title>
      <link><![CDATA[https://en.ara.cat/politics/ayuso-moreno-bonilla-or-the-lehendakari-among-the-victims-of-leak-of-politicians-personal-data_1_5626367.html]]></link>
      <description><![CDATA[<p><img src="https://static1.ara.cat/clip/426c8132-a725-42d3-8b2b-9bfe1a927b9e_16-9-aspect-ratio_default_0.jpg" /></p><p>A new campaign has been launched to leak the personal data of Spanish politicians. After several cyberattacks exposed the data of Spanish Prime Minister Pedro Sánchez and members of his government a few months ago, this time the victims have been regional presidents and high-ranking officials, including Isabel Díaz Ayuso, according to reports. <a href="https://www.eldiario.es/tecnologia/filtran-datos-personales-ayuso-moreno-guardiola-altos-cargos-15-comunidades-autonomas_1_12927858.html" rel="nofollow">published by Eldiario.es</a>Throughout Friday, a second wave of leaks has been made public, affecting the Minister of Transport, Óscar Puente, members of his team, as well as former Minister José Luis Ábalos, Santos Cerdán, and his former advisor, Koldo García. The first leak, according to the online publication, occurred on a website specializing in publishing this type of database. Besides information on the President of the Community of Madrid, the leak also includes data on the President of Andalusia, Juan Manuel Moreno Bonilla; the President of Aragon, Jorge Azcón; the President of Castile and León, Alfonso Fernández Mañueco; the President of the Valencian Community, Juan Francisco Pérez Lorca; the acting President of Extremadura, María Guardiola; the President of Navarre, María Chivite; and the Lehendakari (President of the Basque Government), Imanol Pradales. The leak affects a total of 47 people, and the published information varies depending on the individual. In Ayuso's case, for example, only her personal email address is revealed. But in Pradales' case, data is even included for a person the cyberattacker has identified as her partner. As for other regional presidents and councilors, including some from Catalonia, there is an abundance of national identity card and telephone numbers, as well as home addresses, car details and license plate numbers, and bank account numbers, according to the published information.</p>]]></description>
      <dc:creator><![CDATA[ARA]]></dc:creator>
      <guid isPermaLink="true"><![CDATA[https://en.ara.cat/politics/ayuso-moreno-bonilla-or-the-lehendakari-among-the-victims-of-leak-of-politicians-personal-data_1_5626367.html]]></guid>
      <pubDate><![CDATA[Fri, 23 Jan 2026 10:03:35 +0000]]></pubDate>
      <media:content url="https://static1.ara.cat/clip/426c8132-a725-42d3-8b2b-9bfe1a927b9e_16-9-aspect-ratio_default_0.jpg" type="image/jpeg"/>
      <media:title><![CDATA[Isabel Díaz Ayuso.]]></media:title>
      <media:thumbnail url="https://static1.ara.cat/clip/426c8132-a725-42d3-8b2b-9bfe1a927b9e_16-9-aspect-ratio_default_0.jpg"/>
      <subtitle><![CDATA[Two attacks expose ID numbers, phone numbers and even bank accounts of around fifty regional and transport officials]]></subtitle>
    </item>
    <item>
      <title><![CDATA[Cybercriminals also target the Catalan government: in ten years they have attempted to steal 1.7 million euros]]></title>
      <link><![CDATA[https://en.ara.cat/politics/cybercriminals-also-target-the-catalan-government-in-ten-years-they-have-attempted-to-steal-1-7-million-euros_1_5615032.html]]></link>
      <description><![CDATA[<p><img src="https://static1.ara.cat/clip/4383302f-1a93-470e-8029-223f5c0b985c_16-9-aspect-ratio_default_0_x4802y784.jpg" /></p><p>Cybercrime is a growing phenomenon with the rise of new technologies, so not only are citizens victims, but public administrations have also become a target. In fact, they handle a large volume of resources and data on individuals and legal entities, making them attractive to criminals. Proof of this is that the Generalitat (the Catalan government), as ARA has been able to confirm through a transparency request, has also been a victim of financial fraud. Specifically, a total of €1,711,068 has been "compromised," meaning the government has recorded an attempt to steal this amount of resources through fraud. Of this amount, however, the Generalitat has been able to retain the majority of the money: €1,661,948. "The difference of €49,120 corresponds to the amount that the cybercriminals have actually managed to defraud," the government admits. The Presidency highlights that they have managed to preserve 94% of the resources.</p>]]></description>
      <dc:creator><![CDATA[Núria Orriols]]></dc:creator>
      <guid isPermaLink="true"><![CDATA[https://en.ara.cat/politics/cybercriminals-also-target-the-catalan-government-in-ten-years-they-have-attempted-to-steal-1-7-million-euros_1_5615032.html]]></guid>
      <pubDate><![CDATA[Sun, 11 Jan 2026 17:00:56 +0000]]></pubDate>
      <media:content url="https://static1.ara.cat/clip/4383302f-1a93-470e-8029-223f5c0b985c_16-9-aspect-ratio_default_0_x4802y784.jpg" type="image/jpeg"/>
      <media:title><![CDATA[A cyber attack.]]></media:title>
      <media:thumbnail url="https://static1.ara.cat/clip/4383302f-1a93-470e-8029-223f5c0b985c_16-9-aspect-ratio_default_0_x4802y784.jpg"/>
      <subtitle><![CDATA[The Department of Economy, despite having retained most of the money, has lost 49,000 euros]]></subtitle>
    </item>
    <item>
      <title><![CDATA[Jaguar Land Rover: First UK bailout following cyberattack]]></title>
      <link><![CDATA[https://en.ara.cat/business/jaguar-land-rover-first-uk-bailout-following-cyberattack_130_5514027.html]]></link>
      <description><![CDATA[<p><img src="https://static1.ara.cat/clip/f61dbe16-f2bc-47f6-bff3-8881069886d3_16-9-aspect-ratio_default_1053086.jpg" /></p><p>Some of the best-known names in UK business – brands also known around the world – have been affected in 2025. <a href="https://empreses.ara.cat/empreses/marks-spencer-perd-mil-milions-borsa-mes-atac-informatic_130_5385251.html" >by major cyberattacks</a> that have caused them serious operational consequences and enormous economic losses. Marks & Spencer, Co-operative Group, Harrods—which suffered two, one in May and a second last week—and HM have all suffered the effects of the hacker attack. The automobile company Jaguar Land Rover (JLR) has also suffered two: the first, last March, carried out by a group called Hellcat. However, the company was able to continue its activity without major disruptions.</p>]]></description>
      <dc:creator><![CDATA[Quim Aranda]]></dc:creator>
      <guid isPermaLink="true"><![CDATA[https://en.ara.cat/business/jaguar-land-rover-first-uk-bailout-following-cyberattack_130_5514027.html]]></guid>
      <pubDate><![CDATA[Wed, 01 Oct 2025 05:01:03 +0000]]></pubDate>
      <media:content url="https://static1.ara.cat/clip/f61dbe16-f2bc-47f6-bff3-8881069886d3_16-9-aspect-ratio_default_1053086.jpg" type="image/jpeg"/>
      <media:title><![CDATA[Prime Minister Keir Starmer during his visit to the Jaguar Land Rover plant in Solihull, twelve kilometers from Birmingham, on August 5.]]></media:title>
      <media:thumbnail url="https://static1.ara.cat/clip/f61dbe16-f2bc-47f6-bff3-8881069886d3_16-9-aspect-ratio_default_1053086.jpg"/>
      <subtitle><![CDATA[The government approves 1.5 billion in credit to support suppliers after a month-long production stoppage.]]></subtitle>
    </item>
    <item>
      <title><![CDATA[A cyberattack causes delays and cancellations at three major European airports.]]></title>
      <link><![CDATA[https://en.ara.cat/international/cyberattack-causes-delays-and-cancellations-at-several-european-airports_1_5502910.html]]></link>
      <description><![CDATA[<p><img src="https://static1.ara.cat/clip/212d41b9-f412-48be-a5ce-df6b7906276b_16-9-aspect-ratio_default_0.jpg" /></p><p>A cyberattack against a European service provider for check-in and boarding systems has disrupted operations at several major European airports, including London Heathrow, Brussels Airport, and Berlin Airport. There are delays and cancellations. El Prat Airport is operating normally, according to sources from Aena.</p>]]></description>
      <dc:creator><![CDATA[ARA]]></dc:creator>
      <guid isPermaLink="true"><![CDATA[https://en.ara.cat/international/cyberattack-causes-delays-and-cancellations-at-several-european-airports_1_5502910.html]]></guid>
      <pubDate><![CDATA[Sat, 20 Sep 2025 07:53:46 +0000]]></pubDate>
      <media:content url="https://static1.ara.cat/clip/212d41b9-f412-48be-a5ce-df6b7906276b_16-9-aspect-ratio_default_0.jpg" type="image/jpeg"/>
      <media:title><![CDATA[Passengers at Heathrow Terminal 2]]></media:title>
      <media:thumbnail url="https://static1.ara.cat/clip/212d41b9-f412-48be-a5ce-df6b7906276b_16-9-aspect-ratio_default_0.jpg"/>
      <subtitle><![CDATA[The check-in and check-in systems at Heathrow, Brussels, and Berlin, which were operated by the same software company, are affected.]]></subtitle>
    </item>
    <item>
      <title><![CDATA[A cyberattack affects millions of Telefónica customers, although the company claims none are in Spain.]]></title>
      <link><![CDATA[https://en.ara.cat/economy/cyberattack-affects-millions-of-telefonica-customers-although-the-company-claims-none-are-in-spain_1_5400166.html]]></link>
      <description><![CDATA[<p><img src="https://static1.ara.cat/clip/29797e01-5be0-40dd-91ff-3c3a0279bc52_16-9-aspect-ratio_default_0.jpg" /></p><p>Telefónica is investigating a cyberattack carried out by cybercriminal Dedale, through which he allegedly gained illicit access to 22 million customer records. The perpetrator has leaked, as evidence, a database with one million records.</p>]]></description>
      <dc:creator><![CDATA[ARA]]></dc:creator>
      <guid isPermaLink="true"><![CDATA[https://en.ara.cat/economy/cyberattack-affects-millions-of-telefonica-customers-although-the-company-claims-none-are-in-spain_1_5400166.html]]></guid>
      <pubDate><![CDATA[Tue, 03 Jun 2025 11:45:27 +0000]]></pubDate>
      <media:content url="https://static1.ara.cat/clip/29797e01-5be0-40dd-91ff-3c3a0279bc52_16-9-aspect-ratio_default_0.jpg" type="image/jpeg"/>
      <media:title><![CDATA[Exterior of Telefónica's headquarters in Madrid.]]></media:title>
      <media:thumbnail url="https://static1.ara.cat/clip/29797e01-5be0-40dd-91ff-3c3a0279bc52_16-9-aspect-ratio_default_0.jpg"/>
      <subtitle><![CDATA[The perpetrator, cybercriminal Dedale, presents a database of one million records as evidence and demands a ransom of $1,500.]]></subtitle>
    </item>
    <item>
      <title><![CDATA[More cyberattacks, but less severe: these are the most exposed places]]></title>
      <link><![CDATA[https://en.ara.cat/society/more-cyberattacks-but-less-severe-these-are-the-most-exposed-places_1_5364767.html]]></link>
      <description><![CDATA[<p><img src="https://static1.ara.cat/clip/afbbe1e2-081f-4ead-b70a-2aceed855458_16-9-aspect-ratio_default_0.jpg" /></p><p>There are more cyberattacks, but they are now less serious. This is the assessment made for 2024 by the Catalan Cybersecurity Agency, the body that protects the computer systems of the Generalitat (Catalan Government). Last year, this entity had to manage a total of 3,372 attacks that had some type of impact on the network. Most were minor, such as credential leaks (<em>phishing</em>) or unauthorized access to email. These technological intrusions that put the security of Catalonia's technological system at risk have increased by 26% compared to 2023, when 2,665 were recorded.</p>]]></description>
      <dc:creator><![CDATA[Laia Carpio Fusté]]></dc:creator>
      <guid isPermaLink="true"><![CDATA[https://en.ara.cat/society/more-cyberattacks-but-less-severe-these-are-the-most-exposed-places_1_5364767.html]]></guid>
      <pubDate><![CDATA[Thu, 01 May 2025 06:00:41 +0000]]></pubDate>
      <media:content url="https://static1.ara.cat/clip/afbbe1e2-081f-4ead-b70a-2aceed855458_16-9-aspect-ratio_default_0.jpg" type="image/jpeg"/>
      <media:title><![CDATA[A server in operation, in a company in Barcelona]]></media:title>
      <media:thumbnail url="https://static1.ara.cat/clip/afbbe1e2-081f-4ead-b70a-2aceed855458_16-9-aspect-ratio_default_0.jpg"/>
      <subtitle><![CDATA[The Cybersecurity Agency notes that the most common technique is deception through fake emails, SMS or messages.]]></subtitle>
    </item>
    <item>
      <title><![CDATA[Cyber attack forces Damm to stop brewing beer]]></title>
      <link><![CDATA[https://en.ara.cat/business/cyber-attack-forces-damm-to-stop-brewing-beer_1_4179014.html]]></link>
      <description><![CDATA[<p><img src="https://static1.ara.cat/clip/64b49ce3-c280-4701-88a7-a9835d7c8ae5_16-9-aspect-ratio_default_0.jpg" /></p><p>A computer attack has forced Damm to halt its beer production in El Prat de Llobregat, where the company's has its largest brewery. Sources close to the company have explained to ARA that if the situation is prolonged the plant could run out of stock in a matter of days. The company is being held to a ransom for a figure that this newspaper has not been able to confirm.</p>]]></description>
      <dc:creator><![CDATA[Elisabet Escriche]]></dc:creator>
      <guid isPermaLink="true"><![CDATA[https://en.ara.cat/business/cyber-attack-forces-damm-to-stop-brewing-beer_1_4179014.html]]></guid>
      <pubDate><![CDATA[Thu, 11 Nov 2021 15:38:45 +0000]]></pubDate>
      <media:content url="https://static1.ara.cat/clip/64b49ce3-c280-4701-88a7-a9835d7c8ae5_16-9-aspect-ratio_default_0.jpg" type="image/jpeg"/>
      <media:title><![CDATA[The Damm factory in Prado de Llobregat]]></media:title>
      <media:thumbnail url="https://static1.ara.cat/clip/64b49ce3-c280-4701-88a7-a9835d7c8ae5_16-9-aspect-ratio_default_0.jpg"/>
      <subtitle><![CDATA[The main brewery, in El Prat, could run out of stock in a matter of days]]></subtitle>
    </item>
    <item>
      <title><![CDATA[Authors of cyber attack on UAB threaten to publish information]]></title>
      <link><![CDATA[https://en.ara.cat/society/authors-of-cyber-attack-uab-threaten-to-publish-information_1_4177353.html]]></link>
      <description><![CDATA[<p><img src="https://static1.ara.cat/clip/126fae9e-2ddf-4690-99f0-0fced7a21508_16-9-aspect-ratio_default_0.jpg" /></p><p>The perpetrators of the <a href="https://en.ara.cat/society/computer-attack-leaves-uab-without-internet-and-forces-suspension-of-classes_1_4145436.html">cyberattack </a>that disabled the computer services of the Universitat Autònoma de Barcelona (UAB) 30 days ago have once again shown signs of life. A few hours ago, the dark web page of PYSA, the group responsible for the ransomware (digital kidnapping software) used to carry out the cyber attack, published a list of companies and organisations they threaten to make public the information obtained in their latest cyber attacks. The UAB is on the list, and they warn that "coming soon" they will publish the information they have. The list also includes a date: Wednesday 10 November, which could indicate when the publication will take place, if the threat is real.</p>]]></description>
      <dc:creator><![CDATA[Montse Riart]]></dc:creator>
      <guid isPermaLink="true"><![CDATA[https://en.ara.cat/society/authors-of-cyber-attack-uab-threaten-to-publish-information_1_4177353.html]]></guid>
      <pubDate><![CDATA[Wed, 10 Nov 2021 09:49:28 +0000]]></pubDate>
      <media:content url="https://static1.ara.cat/clip/126fae9e-2ddf-4690-99f0-0fced7a21508_16-9-aspect-ratio_default_0.jpg" type="image/jpeg"/>
      <media:title><![CDATA[A corridor of the UAB]]></media:title>
      <media:thumbnail url="https://static1.ara.cat/clip/126fae9e-2ddf-4690-99f0-0fced7a21508_16-9-aspect-ratio_default_0.jpg"/>
      <subtitle><![CDATA[The cybercriminals have set a deadline for Wednesday, and the university is not aware of any massive leaks, but does not rule them out either.]]></subtitle>
    </item>
    <item>
      <title><![CDATA[Computer attack on the UAB would have affected more than 650,000 files and criminals demand 3 M€]]></title>
      <link><![CDATA[https://en.ara.cat/society/computer-attack-the-uab-would-have-affected-more-than-650-000-files-and-criminals-demand-3-m_1_4149648.html]]></link>
      <description><![CDATA[<p><img src="https://static1.ara.cat/clip/d3ce9d59-14b9-476b-b9da-8be8c84527b4_16-9-aspect-ratio_default_0.jpg" /></p><p>The ARA newspaper has been able to access a list of the documents affected by the computer attack at the Universitat Autònoma de Barcelona (UAB) which contains more than 650,000 folders and files. The attack has been perpetrated with a ransomware - a malicious software that encrypts the victim's documents and demands a ransom to be able to access them again - called PYSA. According to the computer security consultant José Nicolás Castellano, and as the ARA has been able to contrast, the attackers are demanding 60 bitcoins (about three million euros) to release the hijacked files, but UAB sources say they have no record of this because, following the recommendations of the Cybersecurity Agency of Catalonia, they have not contacted the attackers and have no intention of paying.</p>]]></description>
      <dc:creator><![CDATA[Enric Borràs Abelló]]></dc:creator>
      <guid isPermaLink="true"><![CDATA[https://en.ara.cat/society/computer-attack-the-uab-would-have-affected-more-than-650-000-files-and-criminals-demand-3-m_1_4149648.html]]></guid>
      <pubDate><![CDATA[Fri, 15 Oct 2021 13:52:50 +0000]]></pubDate>
      <media:content url="https://static1.ara.cat/clip/d3ce9d59-14b9-476b-b9da-8be8c84527b4_16-9-aspect-ratio_default_0.jpg" type="image/jpeg"/>
      <media:title><![CDATA[A corridor of a faculty of the UAB.]]></media:title>
      <media:thumbnail url="https://static1.ara.cat/clip/d3ce9d59-14b9-476b-b9da-8be8c84527b4_16-9-aspect-ratio_default_0.jpg"/>
      <subtitle><![CDATA[The university says it has not contacted the attackers and has no intention of paying the ransom that would release the encrypted documents]]></subtitle>
    </item>
  </channel>
</rss>
