Adif restores its web pages after a cyber attack that affected private data

Adif reported this Saturday that its websites are operational again and with “guaranteed” security, after this Friday it announced a cyber attack on its systems that affected private data. "After a few hours suspended as a preventive security measure, the Adif and Adif Alta Velocity websites are operational again. The technical services have verified that the security of both websites is guaranteed and, therefore, they are once again available to users and travelers," he published this morning.

In a message on social network

This Friday, Renfe opened a technical investigation into a “cybersecurity incident” related to the obtaining of traveler data whose origin was located in Adif servers previously compromised and connected to the state company's networks.

As explained in a statement, preliminary investigations indicated that the attackers had had access to a “limited” volume of customer information, mainly names and email addresses, without affecting banking or financial information.

Renfe assured that its reaction was “immediate” thanks to the activation of response protocols, the isolation of the environments involved and the adoption of extraordinary containment measures together with independent cybersecurity specialists. In addition, he ruled out the theft of means of payment, DNI numbers or other sensitive data and stated that there was no evidence that the material had been publicly disclosed.

For its part, Adif reported that it detected “unusual activity” within its systems late on Thursday, from which point its cybersecurity specialists were working to counter the attack and contain its impact.

"No application or system related to railway operation has been affected. Railway circulation is guaranteed and develops under normal conditions," he said. The administrator of the tracks where trains run in Spain filed the corresponding complaint, brought the event to the attention of the National Cryptological Center (CCN) and notified companies and suppliers that may have been affected so that they can take the appropriate measures.