Skip to content
Ransomware Attack Targets Romania's National Penitentiary Administration

Ransomware Attack Targets Romania's National Penitentiary Administration

First seen 29 Jul 2026, 17:15 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •July 30, 2026 at 16:10 UTC
  • •ANP suffered a ransomware attack on July 29, 2026, impacting multiple systems.
  • •Immediate isolation of affected equipment was implemented to limit further damage.
  • •Backup systems may reduce the overall impact of the data compromise.

On July 29, 2026, Romania's National Penitentiary Administration (ANP) was hit by a ransomware attack affecting multiple workstations and servers. The attack prompted immediate isolation of affected equipment to limit damage, and several services were temporarily shut down. ANP's director, Geo-Bogdan Burcu, indicated that while the extent of data loss is still being assessed, existing backups may mitigate the impact. The IT team is collaborating with the National Cyber Security Directorate to investigate the incident and restore services. A formal complaint will be filed with DIICOT to further address the attack. The situation is currently under control, with the administration operating in a limited capacity to ensure the rights of incarcerated individuals are maintained.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 53d ago How this analysis works

Timeline

2026-07-29
Ransomware attack on ANP reported
ANP confirmed a ransomware attack affecting workstations and servers, leading to service shutdowns.
digi24.ro
2026-07-29
ANP isolates affected equipment
To limit the attack's impact, ANP physically disconnected compromised systems and services were halted.
realitatea.net
2026-07-29
Investigation initiated
ANP's IT team, along with national cybersecurity experts, began investigating the attack and assessing damage.
digi24.ro

More articles in this cluster (2)

Following this threat?

Track Administrația Națională A Penitenciarelor in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (4)

1 / 2