Cybersecurity incident at an Indra subsidiary

In early July 2026, Indra confirmed that it had suffered a cybersecurity incident affecting one of its subsidiaries. According to information provided by the company itself, the incident involved a ransomware attack detected by its security systems, which triggered the immediate activation of internal incident response protocols. 
Indra explained that the incident affected only one of its subsidiaries and did not spread to the rest of the group’s companies. The company noted that its Computer Security Incident Response Team (CSIRT) immediately activated the containment and analysis measures put in place for such situations. It also reported that the provision of its services continued as normal and that the security of its operations was not compromised. At the same time, the company launched an investigation to clarify the circumstances of the attack and strengthened its cybersecurity measures with the aim of preventing any similar incidents.
The company has confirmed that it was continuing to investigate the origin and scope of the incident as part of its internal response procedures. As of its latest public statement, Indra continues to maintain that the impact of the cyberattack is minimal, that the company’s operations were proceeding as normal, and that there have been no changes to the official assessment of the incident’s status.