Hackers Demand Bitcoin Ransom After Cyberattack on Sanxenxo City Council
Sanxenxo City Council, located in Pontevedra (Galicia), is locked in a standoff following a cyberattack that hit municipal systems and prompted hackers to demand a ransom in Bitcoin. The incident, first reported on Jan. 27, 2026, has left the council website and some administrative services offline while attackers press for payment and officials weigh their response.
The case highlights the ongoing trend of threat actors using cryptocurrency to extort public institutions, complicating investigations and recovery. Local law enforcement and national cybersecurity teams are involved and say negotiations and forensic work are ongoing. For residents, the attack raises concerns about data exposure and service interruptions; authorities caution that paying a Bitcoin ransom does not guarantee full restoration and emphasize the need for stronger defenses and rapid incident response.