Loading story…
A cyberattack forced Puerto Rico’s Department of Transportation to cancel all upcoming appointments for driver’s licenses, permits, and vehicle registrations after affected systems tied to the Centros de Servicios al Conductor (CESCO) were taken offline. The incident was detected by a security monitoring system, prompting the Puerto Rico Innovation and Technology Service (PRITS) to activate incident response protocols and work with transportation officials to contain the attack and restore services.
Officials said the attack was stopped and that there is currently no evidence of data theft, but services remain unavailable while technical testing continues. The disruption directly affected public-facing government operations and adds to a broader pattern of cyber incidents that have recently impacted Puerto Rico’s public sector, including prior ransomware-related disruptions.
See attribution, scope, and your downstream exposure.
2 events from the most recent confirmed update back to the earliest known activity.
Following the attack, Puerto Rico's Department of Transportation canceled all upcoming appointments for driver's licenses, permits, and vehicle registrations at CESCO. Officials said the attack had been stopped, there was no current evidence of data theft, but services remained unavailable pending technical testing.
Puerto Rico officials said a security monitoring system discovered a cyberattack on Monday affecting systems tied to the Department of Transportation and driver services. Incident response protocols were activated, affected systems were disconnected, and technical teams began working to contain the incident and restore services safely.
See attribution, scope, and whether this vendor sits anywhere in your supply chain.
2 references tracked. Mallory keeps watching after this page renders.
scworld.com
Open sourcetherecord.media
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
A ransomware attack hit Spain’s Port of Vigo, disrupting cargo traffic management systems and other digital services while forcing authorities to disconnect affected parts of the network. Port officials said some equipment was locked and the attackers sought a ransom payment, prompting cybersecurity teams to keep systems offline until they can verify the environment is secure. Investigators are still working to determine the initial access vector and whether any sensitive data was compromised. Physical port activity, including ship movements and cargo handling, continued, but logistics coordination through digital platforms was impaired and some cargo-related processes were shifted to manual operations. Port president Carlos Botana said there is no timeline for full restoration, underscoring the operational risk ransomware poses to ports and other maritime organizations that support critical trade flows.
Jun 29, 2026
Passaic County, New Jersey reported a **malware attack** that disrupted county government **IT systems** and caused widespread **phone line outages** across offices serving a population of nearly 600,000. The county indicated phone service went down Wednesday morning and later confirmed the outage was tied to a cyber incident, stating it is working with **federal and state officials** to investigate and contain the intrusion. Officials have not publicly detailed which specific systems were impacted beyond telephony and general IT services, nor attributed the activity to a specific threat actor or confirmed ransomware. County statements also noted that other New Jersey local governments have experienced similar incidents recently, aligning with broader reporting that **municipal and county governments** have remained frequent targets of disruptive malware and ransomware operations.
Jun 29, 2026
North Carolina Ports said a cyberattack by an outside actor disrupted IT systems and gate operations across the Port of Wilmington, the Port of Morehead City, and the Charlotte Inland Port, forcing the authority to activate its cybersecurity contingency plan and process operations manually. The incident was detected on August 4, with recovery efforts beginning the next morning, and officials said the outage slowed truck traffic and broader port activity while gates remained open under manual procedures. The North Carolina State Ports Authority said the breach has been contained and that an external forensics team is assisting the investigation and restoration effort. The U.S. Coast Guard and multiple state agencies are monitoring and coordinating the response, while the ports authority has not disclosed the attack's nature, whether data was stolen, or whether ransomware was involved. By Friday, normal gate and vessel schedules had resumed, but delays were still expected as IT teams continued system recovery.
Aug 10, 2026