Hidden Assets (2021) s02e01 Episode Script
Season 2, Episode 1
1
- My name is Detective
Sergent Emer Berry
with the Criminal
Assets Bureau.
We'll seize anything purchased
with the proceeds of crime.
- They're title deeds
to a property in Antwerp.
- Diamonds.
- And Antwerp Port is
a major hub for smuggling.
- It's also known
for its diamonds.
- The commissioner
wants you and your team
to assist Christian's
antiterrorist department
on a joint investigation
unit on this.
- We have managed to extract
a sample of DNA.
- The bomber?
- He's Colombian.
- All inmates
in La Modelo prison.
- These poor bastards are easy
pickings for someone.
- Luca Rivera.
- He's on his way.
- Or he's already here.
- Why here?
- I need a corporate
presence in the EU.
- Are you sure it's big enough?
- Corporate headquarters,
it's got to be big.
- These images were taken
the night before the bombing.
- There is another attack.
- My wife is prepared
to help you prevent
an imminent terrorist attack
in return for immunity
from all other charges.
- Police! Put your hands
in the air!
- Hands in the air!
- He must stand down!
- He doesn't want to do it.
- I had to do it, Emer.
- He didn't pose a threat.
- He had a bomb.
- What about the people
behind all this?
- We have their images.
We will find them.
- All of this has never been
about anything except you
and your father's
fucking legacy!
- If you knew the whole story,
you'd see this differently.
I did everything you asked.
- Yes, and your discretion
was great, I appreciate it.
- You said you'd protect me!
- And I still am.
That's why you're still here.
- Dad, the door is locked.
- Ah. Just let me get
that for you.
Go tell your granddad
about your yellow belt.
- Granddad!
Granddad!
Granddad!
Granddad!
- Dad!
Arthur!
Arthur?
- He won't wake up.
- Good morning.
- Hello.
- Detective Sean Prendergast,
Criminal Assets Bureau.
- Sign here, please.
- Bibi.
- Frances.
It's been a while.
- Yes.
You were asked to stay away.
Hmm? James was
quite clear about that.
- If you'll excuse me,
my son needs me.
- I'm so sorry to hear
about the divorce.
It's been a lot for James.
- Take your hand off me.
- I think it's best
for everyone that you leave.
I'm sure you don't want
to add to the family's upset.
Especially considering
everything you've put
them through.
- You may have taken over
Richard's company,
but my family is none
of your business.
- No need to make a scene.
The last thing you want to do
is feed scandal to the press.
And we both know Richard's
legacy is at stake.
- Dad?
Dad?
- I'm asking you to walk away.
And that is exactly
what you will do.
- Dad?
- A car will take you
back to your hotel
- It's OK, Arthur,
I'm here. Come on.
- and make sure
you don't miss your flight.
- Right this way.
- Mom.
Mom. Mom.
- Detective Prendergast.
Please, follow me.
Case number D1807.
Thomas Martyn
and Margaux Bayot
And Detective Sean Prendergast
of Criminal Assets
Bureau, Ireland,
present.
You're here
to discuss the events
that led to the death
of Luca Rivera.
For the purpose of the tape,
I'm showing
Detective Prendergast
images retrieved
from security cameras
at the Museum aan de Stroom.
Can you confirm
that this is DS Berry
formely of the Criminal Assets
Bureau in the photograph?
- Yes, that's her.
- Detective Prendergast
will now read a statement
on behalf of DS Berry.
"Having identified
the third prisoner
"smuggled from La Modelo,
"and with credible intel
on the target of the next bomb,
"I proceeded with CTU,
"under the command
of Chief Inspector De Jong,
"to the Museum aan de Stroom.
It was there I saw Luca Rivera,
holding a detonator."
"I identified myself as police
and drew my weapon.
He was immediately surrounded."
"Once I ascertained he was
no longer a threat
"I holstered my weapon
and past him my phone
to call his wife."
- The statement
fails to mention
that Chief Inspector De Jong
ordered DS Berry to stand down.
To your knowledge,
does DS Berry have
hostage negotiation training?
- To my knowledge, she does not.
- I refer you
to DS Berry statement.
According to that,
Luca Rivera was
no longer a threat.
- Hey, Sean. I see
Emer couldn't make it.
- She really wanted be here,
but with the new job
- Of course.
It's enough that she took
the time to make a statement.
Thanks for bringing it
to the comity.
- No worries.
- Pass on my congratulations.
Hmm. Liaison Officer to Madrid,
that's impressive.
- Of course, I will.
Officier Thijs was in
ahead of me.
- Vince's testimony won't have
done me any favours.
- How are you holding up?
- I'm OK.
I'll be able to put this
behind me soon, so
- There's something
you need to know.
In her statement,
Emer was very clear,
Rivera wasn't a threat.
- She's saying I shouldn't
have taken the shot?
Ah.
She only wanted Rivera alive
so she could follow the money.
That's all she cared about.
- What's the problem
with following the money?
We could have gotten
some answers.
- You think any answer could be
worth risking innocent lives?
- Emer believed
the risk had passed.
I trust her judgment.
- Sign here, please.
- Passent Hussein,
Vandaag newspaper.
Can I get a comment
on the Luca Rivera case?
- Any questions,
please take it up with
the Garda Press Office.
Excuse me
I have a call to make.
- I appreciate
you taking the time
to meet with me,
DS Wallace.
- Claire, please.
You were very persuasive
when you called.
- When I find
a promising candidate,
I can be tenacious.
You've been on my radar
for quite some time.
But it was the Hogan case
that pushed me to call.
Bringing down a man
like that, it's impressive.
- I had an excellent team.
- Don't down play your part.
I'll cut to the chase
here, Claire.
I have several clients
that are keen to work with you.
But there's one in particular
that I think is going
to be the perfect fit.
How is head of investigations
sound to you?
- Sounds amazing.
- You'd be running a highly
skilled international team.
When my client expands
into new territories,
additional opportunities
for you.
This is what your experience
is worth to my client.
With childcare costs
being what they are,
not to mention a good school,
and then universities
- You're thorough,
I'll give you that.
Can I ask who your client is?
- MCS.
- Malopa Consultancy Services?
- I understand your concerns.
Working for my client
could put you at odds
with your current colleagues.
The gamekeeper becomes
the poacher, so to speak.
- I'm aware of the work they do.
- These are the opportunities
that are there
for you, Claire.
Don't let an outmoded sense
of duty hold you back.
- It's a tempting offer.
You've given me a lot
to think about.
Chief.
Hey. Something came up.
I'm gonna have to be
in the office.
I will make it home for dinner.
Love you.
- No time off for
either of us today.
Do you know what the fallout
from this will be?
- Let's see the scale
of what we're dealing with
before we go there.
I shouldn't be hearing
about this from Gately.
- I tried to call.
I left two messages.
- How bad is it?
- It's bad.
We can't access documents,
photos or videos.
- So, we're locked out
of all our operational files?
- Everything.
I disconnected us
from the network
as soon as it happened,
but all computers
here are infected.
- The hackers have
access to case files?
- Yeah.
- Including personnel files?
- And confidential
informants.
- This is a shit storm.
- We have to stay focussed.
Gately will be putting
out a statement.
We just need to make sure
that nothing gets leaked out
to the public before she does.
When will Cyber Crime
be here?
- Within the hour.
- Good.
I'll update Gately.
Don't envy that call.
Fuck!
- OK, let's go.
- Clear!
Room secured!
- Target!
- On your knees!
- Puta! Voy a matar
a tu familia!
Police brutality!
I want to speak to a lawyer!
Malditos malparidos!
Hijos de putas!
- Yeah.
- This is a setup.
You planted those drugs.
I've never seen them before.
Abusadores de mierda!
Quiero un abogado.
- Come. Get up.
- Coma mierda, hijo de puta!
Voy a matar
a tu familia tambien!
- Just try to find out
if you can find the source.
- All set?
- Yeah.
OK, I know we're all still
trying to come to terms
with what happened here
and in Dublin,
but we have to work
as best as we can
until the hack
is resolved.
Chief Bureau Officier Gately
is coordinating
the response from Dublin
and Detective Inspector Moore
from the Cyber Crime Bureau
is managing things here.
- Thank you, DS Wallace.
Josh.
Well played
on stemming the bleed.
It was quick thinking.
We've logged the attack
with EC3 in Europol.
My team is setting up
an incident area where we will
assess the impact of the breach.
If anyone has opened
a suspicious email
or shared or changed
a password,
I urged you to come forward
and talk to one of my team.
- Thanks.
- Come on,
man!
- Fuck you, man!
- Counterterrorist Unit.
What the fuck!
- We have a reason to believe
you have information
about last year's bombings.
- Fuck you, man!
- Fuck me?
We have an audio
of you talking
about matters relating
to the attacks.
What do you know about
the dead man from La Modelo?
- Dead man?
What dead man?
- We know death certs
were faked,
we know prisons guards
were paid off,
families compensated.
Maybe you didn't realize
what these men would do
once they got to Belgium.
- I want to speak to a lawyer.
- There's no lawyer that can
get you out of this.
People have died.
Someone has to pay.
- I'm not a terrorist!
I would never kill
innocent people!
- Yeah, you're
a drug dealer, man.
People need someone
to blame, trust me.
This is gonna
be on your head.
I'm giving you a chance
to come clean.
Once we get to Antwerp,
it's out of my hands.
Maybe you didn't plan
the bombings,
but you know who paid off
the prison guards at La Modelo,
so give me a name.
Get down!
- Get me out of here!
I'll tell you
what you want to know!
I'm hit! Help me
get out of here!
- Ah!
- Ah! ah! ah!
- Ah! ah! ah! ah!
- Hey! Hey!
Breathe, breathe.
Stay with me.
- Ah! ah! ah!
- We're gonna get you
out of here.
- Ah!
- We're gonna get you
to a hospital.
Carlos.
- They fucking killed me!
Ah!
- Fuck.
Carlos, tell me what you know
about La Modelo.
Look at me.
Give me a name.
Give me a name!
- Gabrio Rojas!
Gabrio Rojas!
- Norah.
- Hey!
- What's the latest?
- Cyber Crime have quarantined
the hard drives.
They're assessing the scale
of the damage as we speak.
- How much do they want?
- Four million euros
worth of bitcoins.
- Christ!
- How was Antwerp?
- Awkard.
Christian lost the rag a bit.
I said more than I should have.
- We park that and focus
on the matter at hand?
- Norah is just
bringing me up to speed.
What's the worst-case scenario?
- All our open cases are
at the mercy of the hackers.
- God knows what could
happen if they sell
that information on.
- The Kelly case.
- Everything we had for
the warrant was on the system.
- That was the court
on the phone.
I got an extension
for the application
until tomorrow morning.
- What are
our chances?
- Slim to none.
- We've been working
on Kelly for months.
- It's not over yet.
Detective Prendergast,
DI Moore.
- Hi.
- Any theories yet?
- The hackers could have
exploited the office move
to infiltrate the Shannon VPN
as a backdoor
into the secure network
in Dublin.
But it's just as likely to be
a phishing or
a keylogger attack.
- I can't believe this all
comes down
to a bloody password
or a dodgy email.
Did you look at something
you shouldn't have?
- No! Of course not!
- Do you know anything
about the virus?
- It's called Ripper.
It's a fresh variant
that appears to be
splitting and merging files.
Right now, we don't have
a decryption tool.
- But we have backups,
don't we?
- The backup systems were
deliberately targeted
as part of the payload.
- Ah! Where does that leave us?
- With no viable
recovery point.
- So, you're saying
that if we don't pay
the ransom,
we lose everything?
- CAB does not negotiate
with criminals,
let alone fund them.
- Are you OK?
- Interpol NCB Brussels, please.
I need to request a blue notice.
It's a matter
of national security.
Chief Inspector De Jong,
CTU Antwerp.
Yeah. Write this down.
Gabrio Rojas.
That's R-O-J-A-S.
Yeah.
- I have to update
the Chief.
She has a call with
the Minister in 20 minutes.
Where are we
with the hackers?
- Yeah, we've told them
we need more time
to purchase bitcoins.
Let see how long
their patience holds.
- That won't go down well.
They were adamant.
We don't pay them anything.
- I'm just buying us time
while I assess
which if any files they
exfiltrated from the system.
As soon as we know
whether it's about
information or money,
we know how best to respond.
- Anything back from EC3?
- Nothing yet.
- Can I have
a word?
- Hmm, hmm.
- I downloaded an attachment
to my work computer
that I thought was
from my neighbour,
plans for his extension,
but it wasn't.
I checked, he didn't
send the email.
I think this is my fault.
- It's possible.
The virus was lying
dormant on the system
for weeks,
if not longer.
It may or may not have something
to do with that email,
but it is something
we will have to look into.
- I have to call Gately.
And so do you.
- This will not mean
checks at the border
between the Republic
and the North.
Gardai is investigating
a suspected car bombing
in the Midlands
yesterday evening.
but was later released
from hospital.
Gardai has sealed off the area
while an investigation
is carried out.
- All-nighter?
- Hem! Is it that obvious?
What's for lunch?
- Ah, nothing you'd be
interested, Stewart.
It's the healthy option.
- Ah, ah!
- I heard him from the traffic
lads as soon as I got in.
- Good morning.
- It could be a payback
for the Darren Reid hit.
- It makes sense
if his people pinned that
on Fionn Brannigan.
- What could be?
- Bibi Melnick was the target
of a car bomb last night.
- If it was
the Reid's crew,
they waited a long time
for payback.
From what I've read,
Bibi mixed with
some dangerous people.
The question is: why now?
- Maybe it has something
to do with this.
- Is this guy
Bibi Melnick's father-in-law?
- DI Moore, there's
something you need to see.
- Linking Richard's death
to an attempt on Bibi's life is
a bit of a stretch, Sean.
- I recall it was also
a stretch to believe
- You're missing the point.
Look at the timing.
What was Melnick about to buy?
- The port.
- Cyber Crime are moving the
investigation back to Dublin.
They're coordinating
with the Minister's office
on a resolution.
- They're going to pay?
- That's above our pay grade.
DI Moore would like a word.
- OK.
- So, it's over?
- Not exactly.
DI Moore is staying on
to oversee the restoration
of the system.
There's a risk of files
being damaged.
- What else?
- When they threatened
to sell files,
we asked the hackers
for proof of life.
Proof of what
they intended to sell.
In response,
they released personal
information
of a serving CAB officer.
- Right.
- The officer
in question is you.
Here is
what's going to happen now.
Dublin is leading
the investigation
and they've assured me that
the information will be reviewed
to ensure that your anonymity
has not been compromised.
If there's any concern
- Josh, I'm so sorry.
- Do you mind?
Can I have a minute?
Sean.
We're good.
- You're OK?
- Of course I am.
- I worked with Stewart
on the fraud case
a couple years ago,
I trust him.
He'll make sure
no other files are leaked.
- I knew what I was signing up
for when I entered the Bureau.
- All the same,
you and Josh were
guaranteed anonymity.
- Claire, I'll be grand.
Josh is the one you should
be worried about.
He's the one going to be
looking over his shoulder.
We're taking him
for a drink after work.
You're welcome to join.
- Thanks.
I'll take a rain check.
- We'll catch you again.
- Yeah.
- It's a shame she couldn't
go for a drink.
God knows we all need it
after the last couple of days.
- Perhaps she doesn't feel
the need to get to know us.
- Claire is not like that.
- I'm just saying I can't see
her staying here long, Josh.
She was definitely dressed
for an interview yesterday.
- Nothing wrong with planning
for the future, Norah.
Aren't you?
I am.
- Fair enough.
- First round is on me.
- Sorry, I'm not
good company tonight.
I'm just gonna head home.
- Ah, come on, Josh.
It'll do you good.
- I'll catch you tomorrow, guys.
- Why did I open
that email?
- It was socially
engineered, Sean.
They blindsided you.
They knew you were dying to gawk
at your neighbour's new kitchen.
Come on, let's get out of here.
Goodnight, Claire.
- Goodnight.
- Say night night to mom.
- Goodnight, Mama!
We love you, Detective!
Have sweet dreams.
Ah, ah!
- Don't work too hard.
See you when you get home.
Love you. Bye.
- Who is she?
- Don't worry about her,
she doesn't speak English.
- Whatever you do on your time
is your business,
but you're on my clock now.
Where is it?
- At the hotel.
- That was not the deal.
- It's 10 minutes away.
- What are you waiting for?
I have to be at the airport
in one hour.
- Belt.
- How much further?
- Sorry, I'm late.
- How are you doing?
- I didn't get much sleep.
But I'm ready for work.
- Good, man.
- We're updating security
privileges on all the devices,
including multi-factor
authentication.
- Great.
- Going forward, it's best
practice for minimizing
- Yeah, Moore,
you were right,
the files are corrupted.
- Come on, let's have a look.
- I thought it was a blip.
And there were others.
So far, there are 12 case files
either partially
or completely corrupted.
- Ah. It's collateral damage.
Best to log the corrupted files
and we'll take it from there.
Ah. It's EC3.
I have to take this.
DI Moore.
Correct.
When did CTU discovered
the breach?
Understood.
Absolutely. I'll forward
a forensic report
as soon as I have it to see
if there are any similarities.
The federal police building
in Antwerp discovered
a security breach overnight.
You've read my mind, Josh.
What are the odds of that?
Melnick's case files
are corrupted.
- You want to check
on Brannigan?
- Yeah.
Corrupted.
- What am I missing here?
- CAB had a joint operation
with Antwerp CTU last year.
Now the files for the
operation are corrupted.
- This changes everything.
It sounds like
a coordinated attack.
I need to get back onto EC3.
You need to call your liaison
at CTU straight away.
- Just to give you a heads up,
Chief Inspector De Long
may not be over the moon
to hear from CAB.
- Chief Inspector De Long.
- DS Claire Wallace of CAB.
Is this a bad time to talk,
Chief Inspector?
- Yeah, I'm going to have
to call you back.
- No, please, don't hang up.
I need you to listen to me,
this is important.
I'm aware the CTU
have had a breach.
CAB also suffered what appears
to be a ransomware attack.
I think the hacks
are connected.
- I think you're wrong.
- Chief Inspector, I realize
that there's been some
- A security sweep
on our system found
a bad actor monitoring
communications.
It could have had us
under surveillance for months,
but there was no contact,
there were no demands,
so it's nothing like
the attack on CAB.
- The Brannigan-Menick files
were targeted at our end.
You need to check and see
if you can access
the Melnick case files
on your system.
- I got to go.
- Where are you going?
- To pay Bibi Melnick
a visit.
- Is that wise?
- We need answers.
She's the obvious
place to start.
- OK.
I'm going with you.
What can you tell me
about the Melnick case?
- You've read the file.
- There's not much
in the hard copy.
I'd like to hear
your perspective on it, Sean.
- DS Wallace.
- You were right.
The Brannigan-Melnick files
are corrupted.
- So, can you tell me
what the hell is going on?
- I don't know,
but I'm going to find out.
- Il y a encore
des sacs plastiques?
- Ah. Dans l'auto.
- This seems out
of the way for Melnick.
Pretty isolated.
Not what you expected?
- No.
- And on her own out here.
- Wait here.
If the two of us land
on her doorstep,
her guard will go up.
Mrs. Melnick?
DS Wallace.
- It's Ms. Brannigan.
- Can we talk?
- What's this about?
- You had a lucky escape.
It must have been terrifying.
Any idea who might be
trying to hurt you?
- I've given a statement.
If you have any questions,
you can talk to the detective
assigned to the case.
There's nothing else?
- I'm here to tell you
that following a recent incident
we may be reopening your case.
- I'm sorry, who are you?
- DS Claire Wallace with CAB.
- You're right,
yesterday was terrifying.
This isn't the time.
- I was sorry to hear
about your father-in-law.
That can't have been easy.
- Hello.
- James.
It's me.
Can I speak to Arthur?
- Even after what
happened yesterday?
- He's resting.
He had a tough couple of days.
We all have.
So, there's nothing else?
- Please, I just want
to hear his voice.
- Maybe later when he wakes up.
- Thank you.
That means a lot.
I'm worried that whoever it was
might come after
- Bibi, why
why do you insist on bringing
trouble into our lives?
This is exactly the reason
why Arthur can't have
contact with you.
- This isn't my fault.
- You chose your path.
As long as you
stay away from us,
we will be safe.
- Please, James, just
Will you step up security?
- My name is Detective
Sergent Emer Berry
with the Criminal
Assets Bureau.
We'll seize anything purchased
with the proceeds of crime.
- They're title deeds
to a property in Antwerp.
- Diamonds.
- And Antwerp Port is
a major hub for smuggling.
- It's also known
for its diamonds.
- The commissioner
wants you and your team
to assist Christian's
antiterrorist department
on a joint investigation
unit on this.
- We have managed to extract
a sample of DNA.
- The bomber?
- He's Colombian.
- All inmates
in La Modelo prison.
- These poor bastards are easy
pickings for someone.
- Luca Rivera.
- He's on his way.
- Or he's already here.
- Why here?
- I need a corporate
presence in the EU.
- Are you sure it's big enough?
- Corporate headquarters,
it's got to be big.
- These images were taken
the night before the bombing.
- There is another attack.
- My wife is prepared
to help you prevent
an imminent terrorist attack
in return for immunity
from all other charges.
- Police! Put your hands
in the air!
- Hands in the air!
- He must stand down!
- He doesn't want to do it.
- I had to do it, Emer.
- He didn't pose a threat.
- He had a bomb.
- What about the people
behind all this?
- We have their images.
We will find them.
- All of this has never been
about anything except you
and your father's
fucking legacy!
- If you knew the whole story,
you'd see this differently.
I did everything you asked.
- Yes, and your discretion
was great, I appreciate it.
- You said you'd protect me!
- And I still am.
That's why you're still here.
- Dad, the door is locked.
- Ah. Just let me get
that for you.
Go tell your granddad
about your yellow belt.
- Granddad!
Granddad!
Granddad!
Granddad!
- Dad!
Arthur!
Arthur?
- He won't wake up.
- Good morning.
- Hello.
- Detective Sean Prendergast,
Criminal Assets Bureau.
- Sign here, please.
- Bibi.
- Frances.
It's been a while.
- Yes.
You were asked to stay away.
Hmm? James was
quite clear about that.
- If you'll excuse me,
my son needs me.
- I'm so sorry to hear
about the divorce.
It's been a lot for James.
- Take your hand off me.
- I think it's best
for everyone that you leave.
I'm sure you don't want
to add to the family's upset.
Especially considering
everything you've put
them through.
- You may have taken over
Richard's company,
but my family is none
of your business.
- No need to make a scene.
The last thing you want to do
is feed scandal to the press.
And we both know Richard's
legacy is at stake.
- Dad?
Dad?
- I'm asking you to walk away.
And that is exactly
what you will do.
- Dad?
- A car will take you
back to your hotel
- It's OK, Arthur,
I'm here. Come on.
- and make sure
you don't miss your flight.
- Right this way.
- Mom.
Mom. Mom.
- Detective Prendergast.
Please, follow me.
Case number D1807.
Thomas Martyn
and Margaux Bayot
And Detective Sean Prendergast
of Criminal Assets
Bureau, Ireland,
present.
You're here
to discuss the events
that led to the death
of Luca Rivera.
For the purpose of the tape,
I'm showing
Detective Prendergast
images retrieved
from security cameras
at the Museum aan de Stroom.
Can you confirm
that this is DS Berry
formely of the Criminal Assets
Bureau in the photograph?
- Yes, that's her.
- Detective Prendergast
will now read a statement
on behalf of DS Berry.
"Having identified
the third prisoner
"smuggled from La Modelo,
"and with credible intel
on the target of the next bomb,
"I proceeded with CTU,
"under the command
of Chief Inspector De Jong,
"to the Museum aan de Stroom.
It was there I saw Luca Rivera,
holding a detonator."
"I identified myself as police
and drew my weapon.
He was immediately surrounded."
"Once I ascertained he was
no longer a threat
"I holstered my weapon
and past him my phone
to call his wife."
- The statement
fails to mention
that Chief Inspector De Jong
ordered DS Berry to stand down.
To your knowledge,
does DS Berry have
hostage negotiation training?
- To my knowledge, she does not.
- I refer you
to DS Berry statement.
According to that,
Luca Rivera was
no longer a threat.
- Hey, Sean. I see
Emer couldn't make it.
- She really wanted be here,
but with the new job
- Of course.
It's enough that she took
the time to make a statement.
Thanks for bringing it
to the comity.
- No worries.
- Pass on my congratulations.
Hmm. Liaison Officer to Madrid,
that's impressive.
- Of course, I will.
Officier Thijs was in
ahead of me.
- Vince's testimony won't have
done me any favours.
- How are you holding up?
- I'm OK.
I'll be able to put this
behind me soon, so
- There's something
you need to know.
In her statement,
Emer was very clear,
Rivera wasn't a threat.
- She's saying I shouldn't
have taken the shot?
Ah.
She only wanted Rivera alive
so she could follow the money.
That's all she cared about.
- What's the problem
with following the money?
We could have gotten
some answers.
- You think any answer could be
worth risking innocent lives?
- Emer believed
the risk had passed.
I trust her judgment.
- Sign here, please.
- Passent Hussein,
Vandaag newspaper.
Can I get a comment
on the Luca Rivera case?
- Any questions,
please take it up with
the Garda Press Office.
Excuse me
I have a call to make.
- I appreciate
you taking the time
to meet with me,
DS Wallace.
- Claire, please.
You were very persuasive
when you called.
- When I find
a promising candidate,
I can be tenacious.
You've been on my radar
for quite some time.
But it was the Hogan case
that pushed me to call.
Bringing down a man
like that, it's impressive.
- I had an excellent team.
- Don't down play your part.
I'll cut to the chase
here, Claire.
I have several clients
that are keen to work with you.
But there's one in particular
that I think is going
to be the perfect fit.
How is head of investigations
sound to you?
- Sounds amazing.
- You'd be running a highly
skilled international team.
When my client expands
into new territories,
additional opportunities
for you.
This is what your experience
is worth to my client.
With childcare costs
being what they are,
not to mention a good school,
and then universities
- You're thorough,
I'll give you that.
Can I ask who your client is?
- MCS.
- Malopa Consultancy Services?
- I understand your concerns.
Working for my client
could put you at odds
with your current colleagues.
The gamekeeper becomes
the poacher, so to speak.
- I'm aware of the work they do.
- These are the opportunities
that are there
for you, Claire.
Don't let an outmoded sense
of duty hold you back.
- It's a tempting offer.
You've given me a lot
to think about.
Chief.
Hey. Something came up.
I'm gonna have to be
in the office.
I will make it home for dinner.
Love you.
- No time off for
either of us today.
Do you know what the fallout
from this will be?
- Let's see the scale
of what we're dealing with
before we go there.
I shouldn't be hearing
about this from Gately.
- I tried to call.
I left two messages.
- How bad is it?
- It's bad.
We can't access documents,
photos or videos.
- So, we're locked out
of all our operational files?
- Everything.
I disconnected us
from the network
as soon as it happened,
but all computers
here are infected.
- The hackers have
access to case files?
- Yeah.
- Including personnel files?
- And confidential
informants.
- This is a shit storm.
- We have to stay focussed.
Gately will be putting
out a statement.
We just need to make sure
that nothing gets leaked out
to the public before she does.
When will Cyber Crime
be here?
- Within the hour.
- Good.
I'll update Gately.
Don't envy that call.
Fuck!
- OK, let's go.
- Clear!
Room secured!
- Target!
- On your knees!
- Puta! Voy a matar
a tu familia!
Police brutality!
I want to speak to a lawyer!
Malditos malparidos!
Hijos de putas!
- Yeah.
- This is a setup.
You planted those drugs.
I've never seen them before.
Abusadores de mierda!
Quiero un abogado.
- Come. Get up.
- Coma mierda, hijo de puta!
Voy a matar
a tu familia tambien!
- Just try to find out
if you can find the source.
- All set?
- Yeah.
OK, I know we're all still
trying to come to terms
with what happened here
and in Dublin,
but we have to work
as best as we can
until the hack
is resolved.
Chief Bureau Officier Gately
is coordinating
the response from Dublin
and Detective Inspector Moore
from the Cyber Crime Bureau
is managing things here.
- Thank you, DS Wallace.
Josh.
Well played
on stemming the bleed.
It was quick thinking.
We've logged the attack
with EC3 in Europol.
My team is setting up
an incident area where we will
assess the impact of the breach.
If anyone has opened
a suspicious email
or shared or changed
a password,
I urged you to come forward
and talk to one of my team.
- Thanks.
- Come on,
man!
- Fuck you, man!
- Counterterrorist Unit.
What the fuck!
- We have a reason to believe
you have information
about last year's bombings.
- Fuck you, man!
- Fuck me?
We have an audio
of you talking
about matters relating
to the attacks.
What do you know about
the dead man from La Modelo?
- Dead man?
What dead man?
- We know death certs
were faked,
we know prisons guards
were paid off,
families compensated.
Maybe you didn't realize
what these men would do
once they got to Belgium.
- I want to speak to a lawyer.
- There's no lawyer that can
get you out of this.
People have died.
Someone has to pay.
- I'm not a terrorist!
I would never kill
innocent people!
- Yeah, you're
a drug dealer, man.
People need someone
to blame, trust me.
This is gonna
be on your head.
I'm giving you a chance
to come clean.
Once we get to Antwerp,
it's out of my hands.
Maybe you didn't plan
the bombings,
but you know who paid off
the prison guards at La Modelo,
so give me a name.
Get down!
- Get me out of here!
I'll tell you
what you want to know!
I'm hit! Help me
get out of here!
- Ah!
- Ah! ah! ah!
- Ah! ah! ah! ah!
- Hey! Hey!
Breathe, breathe.
Stay with me.
- Ah! ah! ah!
- We're gonna get you
out of here.
- Ah!
- We're gonna get you
to a hospital.
Carlos.
- They fucking killed me!
Ah!
- Fuck.
Carlos, tell me what you know
about La Modelo.
Look at me.
Give me a name.
Give me a name!
- Gabrio Rojas!
Gabrio Rojas!
- Norah.
- Hey!
- What's the latest?
- Cyber Crime have quarantined
the hard drives.
They're assessing the scale
of the damage as we speak.
- How much do they want?
- Four million euros
worth of bitcoins.
- Christ!
- How was Antwerp?
- Awkard.
Christian lost the rag a bit.
I said more than I should have.
- We park that and focus
on the matter at hand?
- Norah is just
bringing me up to speed.
What's the worst-case scenario?
- All our open cases are
at the mercy of the hackers.
- God knows what could
happen if they sell
that information on.
- The Kelly case.
- Everything we had for
the warrant was on the system.
- That was the court
on the phone.
I got an extension
for the application
until tomorrow morning.
- What are
our chances?
- Slim to none.
- We've been working
on Kelly for months.
- It's not over yet.
Detective Prendergast,
DI Moore.
- Hi.
- Any theories yet?
- The hackers could have
exploited the office move
to infiltrate the Shannon VPN
as a backdoor
into the secure network
in Dublin.
But it's just as likely to be
a phishing or
a keylogger attack.
- I can't believe this all
comes down
to a bloody password
or a dodgy email.
Did you look at something
you shouldn't have?
- No! Of course not!
- Do you know anything
about the virus?
- It's called Ripper.
It's a fresh variant
that appears to be
splitting and merging files.
Right now, we don't have
a decryption tool.
- But we have backups,
don't we?
- The backup systems were
deliberately targeted
as part of the payload.
- Ah! Where does that leave us?
- With no viable
recovery point.
- So, you're saying
that if we don't pay
the ransom,
we lose everything?
- CAB does not negotiate
with criminals,
let alone fund them.
- Are you OK?
- Interpol NCB Brussels, please.
I need to request a blue notice.
It's a matter
of national security.
Chief Inspector De Jong,
CTU Antwerp.
Yeah. Write this down.
Gabrio Rojas.
That's R-O-J-A-S.
Yeah.
- I have to update
the Chief.
She has a call with
the Minister in 20 minutes.
Where are we
with the hackers?
- Yeah, we've told them
we need more time
to purchase bitcoins.
Let see how long
their patience holds.
- That won't go down well.
They were adamant.
We don't pay them anything.
- I'm just buying us time
while I assess
which if any files they
exfiltrated from the system.
As soon as we know
whether it's about
information or money,
we know how best to respond.
- Anything back from EC3?
- Nothing yet.
- Can I have
a word?
- Hmm, hmm.
- I downloaded an attachment
to my work computer
that I thought was
from my neighbour,
plans for his extension,
but it wasn't.
I checked, he didn't
send the email.
I think this is my fault.
- It's possible.
The virus was lying
dormant on the system
for weeks,
if not longer.
It may or may not have something
to do with that email,
but it is something
we will have to look into.
- I have to call Gately.
And so do you.
- This will not mean
checks at the border
between the Republic
and the North.
Gardai is investigating
a suspected car bombing
in the Midlands
yesterday evening.
but was later released
from hospital.
Gardai has sealed off the area
while an investigation
is carried out.
- All-nighter?
- Hem! Is it that obvious?
What's for lunch?
- Ah, nothing you'd be
interested, Stewart.
It's the healthy option.
- Ah, ah!
- I heard him from the traffic
lads as soon as I got in.
- Good morning.
- It could be a payback
for the Darren Reid hit.
- It makes sense
if his people pinned that
on Fionn Brannigan.
- What could be?
- Bibi Melnick was the target
of a car bomb last night.
- If it was
the Reid's crew,
they waited a long time
for payback.
From what I've read,
Bibi mixed with
some dangerous people.
The question is: why now?
- Maybe it has something
to do with this.
- Is this guy
Bibi Melnick's father-in-law?
- DI Moore, there's
something you need to see.
- Linking Richard's death
to an attempt on Bibi's life is
a bit of a stretch, Sean.
- I recall it was also
a stretch to believe
- You're missing the point.
Look at the timing.
What was Melnick about to buy?
- The port.
- Cyber Crime are moving the
investigation back to Dublin.
They're coordinating
with the Minister's office
on a resolution.
- They're going to pay?
- That's above our pay grade.
DI Moore would like a word.
- OK.
- So, it's over?
- Not exactly.
DI Moore is staying on
to oversee the restoration
of the system.
There's a risk of files
being damaged.
- What else?
- When they threatened
to sell files,
we asked the hackers
for proof of life.
Proof of what
they intended to sell.
In response,
they released personal
information
of a serving CAB officer.
- Right.
- The officer
in question is you.
Here is
what's going to happen now.
Dublin is leading
the investigation
and they've assured me that
the information will be reviewed
to ensure that your anonymity
has not been compromised.
If there's any concern
- Josh, I'm so sorry.
- Do you mind?
Can I have a minute?
Sean.
We're good.
- You're OK?
- Of course I am.
- I worked with Stewart
on the fraud case
a couple years ago,
I trust him.
He'll make sure
no other files are leaked.
- I knew what I was signing up
for when I entered the Bureau.
- All the same,
you and Josh were
guaranteed anonymity.
- Claire, I'll be grand.
Josh is the one you should
be worried about.
He's the one going to be
looking over his shoulder.
We're taking him
for a drink after work.
You're welcome to join.
- Thanks.
I'll take a rain check.
- We'll catch you again.
- Yeah.
- It's a shame she couldn't
go for a drink.
God knows we all need it
after the last couple of days.
- Perhaps she doesn't feel
the need to get to know us.
- Claire is not like that.
- I'm just saying I can't see
her staying here long, Josh.
She was definitely dressed
for an interview yesterday.
- Nothing wrong with planning
for the future, Norah.
Aren't you?
I am.
- Fair enough.
- First round is on me.
- Sorry, I'm not
good company tonight.
I'm just gonna head home.
- Ah, come on, Josh.
It'll do you good.
- I'll catch you tomorrow, guys.
- Why did I open
that email?
- It was socially
engineered, Sean.
They blindsided you.
They knew you were dying to gawk
at your neighbour's new kitchen.
Come on, let's get out of here.
Goodnight, Claire.
- Goodnight.
- Say night night to mom.
- Goodnight, Mama!
We love you, Detective!
Have sweet dreams.
Ah, ah!
- Don't work too hard.
See you when you get home.
Love you. Bye.
- Who is she?
- Don't worry about her,
she doesn't speak English.
- Whatever you do on your time
is your business,
but you're on my clock now.
Where is it?
- At the hotel.
- That was not the deal.
- It's 10 minutes away.
- What are you waiting for?
I have to be at the airport
in one hour.
- Belt.
- How much further?
- Sorry, I'm late.
- How are you doing?
- I didn't get much sleep.
But I'm ready for work.
- Good, man.
- We're updating security
privileges on all the devices,
including multi-factor
authentication.
- Great.
- Going forward, it's best
practice for minimizing
- Yeah, Moore,
you were right,
the files are corrupted.
- Come on, let's have a look.
- I thought it was a blip.
And there were others.
So far, there are 12 case files
either partially
or completely corrupted.
- Ah. It's collateral damage.
Best to log the corrupted files
and we'll take it from there.
Ah. It's EC3.
I have to take this.
DI Moore.
Correct.
When did CTU discovered
the breach?
Understood.
Absolutely. I'll forward
a forensic report
as soon as I have it to see
if there are any similarities.
The federal police building
in Antwerp discovered
a security breach overnight.
You've read my mind, Josh.
What are the odds of that?
Melnick's case files
are corrupted.
- You want to check
on Brannigan?
- Yeah.
Corrupted.
- What am I missing here?
- CAB had a joint operation
with Antwerp CTU last year.
Now the files for the
operation are corrupted.
- This changes everything.
It sounds like
a coordinated attack.
I need to get back onto EC3.
You need to call your liaison
at CTU straight away.
- Just to give you a heads up,
Chief Inspector De Long
may not be over the moon
to hear from CAB.
- Chief Inspector De Long.
- DS Claire Wallace of CAB.
Is this a bad time to talk,
Chief Inspector?
- Yeah, I'm going to have
to call you back.
- No, please, don't hang up.
I need you to listen to me,
this is important.
I'm aware the CTU
have had a breach.
CAB also suffered what appears
to be a ransomware attack.
I think the hacks
are connected.
- I think you're wrong.
- Chief Inspector, I realize
that there's been some
- A security sweep
on our system found
a bad actor monitoring
communications.
It could have had us
under surveillance for months,
but there was no contact,
there were no demands,
so it's nothing like
the attack on CAB.
- The Brannigan-Menick files
were targeted at our end.
You need to check and see
if you can access
the Melnick case files
on your system.
- I got to go.
- Where are you going?
- To pay Bibi Melnick
a visit.
- Is that wise?
- We need answers.
She's the obvious
place to start.
- OK.
I'm going with you.
What can you tell me
about the Melnick case?
- You've read the file.
- There's not much
in the hard copy.
I'd like to hear
your perspective on it, Sean.
- DS Wallace.
- You were right.
The Brannigan-Melnick files
are corrupted.
- So, can you tell me
what the hell is going on?
- I don't know,
but I'm going to find out.
- Il y a encore
des sacs plastiques?
- Ah. Dans l'auto.
- This seems out
of the way for Melnick.
Pretty isolated.
Not what you expected?
- No.
- And on her own out here.
- Wait here.
If the two of us land
on her doorstep,
her guard will go up.
Mrs. Melnick?
DS Wallace.
- It's Ms. Brannigan.
- Can we talk?
- What's this about?
- You had a lucky escape.
It must have been terrifying.
Any idea who might be
trying to hurt you?
- I've given a statement.
If you have any questions,
you can talk to the detective
assigned to the case.
There's nothing else?
- I'm here to tell you
that following a recent incident
we may be reopening your case.
- I'm sorry, who are you?
- DS Claire Wallace with CAB.
- You're right,
yesterday was terrifying.
This isn't the time.
- I was sorry to hear
about your father-in-law.
That can't have been easy.
- Hello.
- James.
It's me.
Can I speak to Arthur?
- Even after what
happened yesterday?
- He's resting.
He had a tough couple of days.
We all have.
So, there's nothing else?
- Please, I just want
to hear his voice.
- Maybe later when he wakes up.
- Thank you.
That means a lot.
I'm worried that whoever it was
might come after
- Bibi, why
why do you insist on bringing
trouble into our lives?
This is exactly the reason
why Arthur can't have
contact with you.
- This isn't my fault.
- You chose your path.
As long as you
stay away from us,
we will be safe.
- Please, James, just
Will you step up security?