The Spanish National Research Council (CSIC) was hit by a ransomware attack that is now attributed to Russian hackers. No indication that the attacker stole sensitive or confidential information. The Cybersecurity Operations Center (COCS) and the National Cryptologic Center (CCN) protocol was immediately activated after the intrusion was discovered. In an effort to contain the attack and stop it from spreading to areas that had not been directly damaged, the agency adds that it adhered to protocol and disconnected some of its research facilities from the network.