Spanish Ministry of Science partially shuts down IT systems amid suspected data breach

Bleeping Computer reports that Spain's Ministry of Science has partially shut down its IT systems, impacting services for citizens and companies, following a suspected cyberattack.

The Ministry of Science, Innovation and Universities announced a "technical incident" leading to the partial closure of its electronic headquarters, suspending administrative procedures. A threat actor known as "GordonFreeman" has claimed responsibility, allegedly exploiting an Insecure Direct Object Reference (IDOR) vulnerability to gain admin-level access. The attacker claims to have stolen sensitive data, including personal records and official documents, and offered it for sale. While the forum where the data was posted is now offline, Spanish media reports indicate a ministry spokesperson confirmed the disruption is linked to a cyberattack. The ministry stated that all deadlines for affected procedures will be extended to safeguard affected parties.

Source: Bleeping Computer