Infraestructures de la Generalitat de Catalunya targeted by apos ransomware group

• Ransomware group: apos
• Country: Spain
• Sector: Energy & Utilities
• Announcement date: June 12, 2025

Apos group claims breach of infraestructures.cat servers

The threat actor group known as apos has announced a cyberattack targeting infraestructures.cat. According to a post on a ransomware leak site, the group claims to have successfully compromised the organization's servers and exfiltrated data from their systems.

The threat actor alleges that they have gained access to the main servers of infraestructures.cat and have obtained a complete copy of all data held by the organization. Following this claim, the group has issued a deadline, stating that if the organization does not contact them within 15 days, the stolen data will be leaked publicly. Information regarding the specific identity and background of the apos group remains limited in the public domain.

Details regarding the alleged data exfiltration

While the group claims to possess a full copy of the organization's data, there is currently no detailed information regarding the specific nature of the data allegedly exfiltrated. The threat actor has not provided any screenshots or specific file samples to substantiate their claims of a successful breach.

• The listing names no specific data types.

In modern cyberattack scenarios, particularly those involving double extortion, threat actors often use the threat of leaking sensitive information to pressure organizations into paying a ransom. This method involves stealing data before encrypting systems, ensuring that even if the organization can restore from backups, the threat of public exposure remains a potent leverage tool.

About infraestructures.cat

Infraestructures de la Generalitat de Catalunya is a public entity under the Government of Catalonia. The organization is responsible for the planning, design, and construction of public infrastructure projects. It manages the development of strategic infrastructure, such as public buildings and transport networks, within the region.

Potential impact and organizational risks

These claims pose significant risks to the organization's operational continuity and data privacy. If the data is indeed leaked, the organization may face regulatory sanctions under the General Data Protection Regulation (GDPR). Such incidents often highlight the critical importance of robust data governance and strict adherence to privacy standards.

Beyond regulatory consequences, secondary risks may arise, such as the potential for identity theft or targeted phishing attacks directed at the organization's employees and customers. Furthermore, any disruptions to the organization's systems could potentially impact critical infrastructure processes within the energy and utilities sector.

For organizations operating within critical infrastructure sectors, maintaining high levels of cybersecurity is essential to prevent disruptions to essential services. Common defensive strategies often include implementing multi-factor authentication, maintaining offline backups, and conducting regular security audits to identify vulnerabilities. Protecting the integrity of public infrastructure and the privacy of citizen data remains a primary concern for public entities facing evolving digital threats.