Respuesta-a-Incidentes

ShinyHunters claims 2 million Crunchbase records; the company confirms the breach

Crunchbase has confirmed a cybersecurity incident following claims by the cybercriminal group ShinyHunters, which claims to have stolen more than 2 million personal records from its systems. ShinyHunters leaked a 402MB zip file on its Tor website, stating that the data release was due to a failed extortion attempt. Crunchbase response to the incident The company has issued statements confirming the security incident, although it emphasizes that its operations were not affected. Crunchbase claimed to have contained the incident and that its systems are secure. ...

Threat actor claims the theft of full customer data from Spanish energy firm Endesa

Endesa Confirms Security Incident Following Threat Actor Statement Spanish energy company Endesa has confirmed a security incident that resulted in unauthorized access to its trading platform, compromising customer data. Endesa is the largest electricity supplier in Spain, serving more than 10 million customers. Confirmation of the incident comes after a threat actor posted on a cybercrime forum claiming to have stolen 1.05 terabytes of company data. According to the Endesa Energía statement, the incident allowed “unauthorized and illegitimate” access to customers’ personal data. ...

Romanian Waters confirms cyber attack, critical water operations unaffected

Romania’s national water management authority, Romanian Waters (Administrația Națională Apele Române), confirmed being the victim of a ransomware attack during the weekend of December 20, 2025. According to the National Cybersecurity Directorate (DNSC), the incident affected approximately 1,000 computer systems in the central organization and in 10 of its 11 regional offices. Impact on IT and OT Systems The ransomware attack disrupted a variety of IT assets, including Geographic Information System (GIS) servers, databases, email and web services, Windows workstations, and domain name servers (DNS). ...

Multiple London Local Authorities Face Serious Cybersecurity Incident

Multiple local authorities in London are dealing with a serious cybersecurity incident, it has recently emerged. The Royal Borough of Kensington and Chelsea (RBKC) and Westminster City Council (WCC) issued a statement saying they are responding to an incident identified on Monday morning. The incident has impacted several systems of both organizations, including telephone lines. Both entities have notified the UK Information Commissioner’s Office (ICO) and are collaborating with the National Cyber Security Center (NCSC) for the response to the incident. ...