Globalcaja Bank reports ransomware attack

Spanish Globalcaja bank has confirmed that it is currently facing a ransomware attack that has impacted multiple branches of the organization.

The bank released a statement to assure its customers that the incident has not affected the operations of its entities.The electronic banking and ATM services are still functioning smoothly.

Globalcaja is actively working to normalize the situation and conducting an analysis to determine the cause of the attack. In response to the attack, the bank has implemented security protocols, including disabling certain office workstations and temporarily restricting some operations.

The Play ransomware gang recently listed Globalcaja as one of its victims on a Tor leak site and claims to have successfully accessed sensitive and confidential information, including private client and employee data, documents, passports, contracts, and other related materials. To avoid the publication of this stolen data, the gang demands a ransom from the bank.

There are no details whether the bank has paid the ransom.