Ransomware disrupts Romanian penitentiary services and prisoner transfers

A ransomware attack against Romanian National Administration of Penitentiaries workstations and servers began overnight on 28-29 July 2026. ANP isolated equipment and temporarily stopped services including IMS Web, Infokiosk, inmate telephony, visit scheduling, inter-facility VPN connectivity and its website. Prisoner transfers between facilities were suspended and alternative operating procedures were introduced. ANP reported the following day that essential prison activities were functioning normally using fallback communications while IT restoration continued.