Legal: Cybersecurity news in Portugal

The Agency for the Technological Reform of the State (Agência para a Reforma Tecnológica do Estado or ARTE) has warned citizens about fraudulent SMS messages impersonating the Digital Mobile Key (Chave Móvel Digital or CMD). The phishing campaign attempts to trick recipients into revealing personal data and security codes through suspicious links. ARTE emphasized that it never solicits personal information or banking credentials by text, email, or telephone.

Portuguese telecommunications providers MEO, NOS, and Vodafone have joined an international initiative to prevent banking fraud through automated number and SIM card verification. The new tools allow financial institutions to check whether a customer's SIM card was recently duplicated before authorizing account access or money transfers. The measure specifically targets SIM-swapping schemes, in which scammers obtain duplicate cards to intercept two-factor SMS verification codes.

Minister of Environment Maria da Graça Carvalho confirmed that a recent cyberattack targeting several companies within the Águas de Portugal group did not impact the public water supply. The minister stated that the breach was contained within the administrative systems of the utility provider.

The state-owned water management group Águas de Portugal confirmed it is the target of a complex cyberattack affecting its information systems and customer contact channels. The company assured the public that water supply, sanitation, and quality remain unaffected while the Judiciary Police and the National Cybersecurity Center (Centro Nacional de Cibersegurança or CNCS) investigate the breach.

Metro Mondego has alerted pass holders that personal information, including names and identification numbers, may have been copied during a ransomware attack on July 6. The company, which operates the metrobus service between Lousã and Coimbra, confirmed that bank payment data remains secure while it works with cybersecurity experts to manage the incident.

The latest Annual Internal Security Report (Relatório Anual de Segurança Interna or RASI) highlights a 13.4% rise in cybercrime during 2025. Authorities note that criminal attacks are becoming increasingly sophisticated, posing significant challenges for both private companies and public institutions.

A hacker has reportedly stolen one million data records from the Locky locker service operated by the national postal service, CTT. The company confirmed the breach, stating that the stolen information includes contact details, delivery identification, and collection times, but clarified that financial data and passwords remain secure. CTT has notified the National Cybersecurity Center (Centro Nacional de Cibersegurança) and is contacting affected customers.

The Tax and Customs Authority (Autoridade Tributária e Aduaneira or AT) has issued warnings regarding an increase in fraudulent schemes targeting taxpayers during the current income tax (Imposto sobre o Rendimento de Pessoas Singulares or IRS) filing period. Criminals are using the agency's name to send deceptive messages about refunds or outstanding debts to steal personal information.

The Security Intelligence Service (Serviço de Informações de Segurança or SIS) has issued an alert regarding a foreign state campaign targeting WhatsApp and Signal accounts. The operation uses social engineering and AI-generated content to trick government officials, diplomats, and military personnel into compromising their data. Residents should be cautious of unsolicited messages or unusual requests for account verification codes.