My name is Detective Sergent Emer Berry
with the Criminal Assets Bureau.
We'll seize anything purchased with the proceeds of crime.
They're title deeds to a property in Antwerp.
- Diamonds. - And Antwerp Port is
a major hub for smuggling.
It's also known for its diamonds. (Explosion)
(siren)
The commissioner wants you and your team
to assist Christian's antiterrorist department
on a joint investigation unit on this.
We have managed to extract a sample of DNA.
- The bomber? - He's Colombian.
All inmates in La Modelo prison.
These poor bastards are easy pickings for someone.
Luca Rivera.
- He's on his way. - Or he's already here.
Why here?
I need a corporate presence in the EU.
Are you sure it's big enough?
Corporate headquarters, it's got to be big.
These images were taken the night before the bombing.
There is another attack.
My wife is prepared to help you prevent
an imminent terrorist attack
in return for immunity from all other charges.
Police! Put your hands in the air! (All scream)
Hands in the air!
- He must stand down! - He doesn't want to do it.
(gunshot)
I had to do it, Emer.
- He didn't pose a threat. - He had a bomb.
What about the people behind all this?
We have their images. We will find them.
All of this has never been about anything except you
and your father's fucking legacy!
If you knew the whole story, you'd see this differently.
I did everything you asked.
Yes, and your discretion was great, I appreciate it.
You said you'd protect me!
And I still am. That's why you're still here.
(opera music)
(Bang!)
(indistinct)
Dad, the door is locked.
Ah. Just let me get that for you.
Go tell your granddad about your yellow belt.
Granddad!
(###)
Granddad!
(###)
Granddad!
(opera music)
(Music stops.)
Dad!
Arthur!
(ominous music)
Arthur?
(Arthur sighs)
(###)
He won't wake up.
(###)
(theme song)
(###)
- Good morning. - Hello.
Detective Sean Prendergast, Criminal Assets Bureau.
Sign here, please.
(voice in the background)
(###)
(Church bell tolls)
Bibi.
Frances. It's been a while.
Yes.
You were asked to stay away.
Hmm? James was quite clear about that.
If you'll excuse me, my son needs me.
I'm so sorry to hear about the divorce.
It's been a lot for James.
Take your hand off me.
I think it's best for everyone that you leave.
I'm sure you don't want to add to the family's upset.
Especially considering
everything you've put them through.
You may have taken over Richard's company,
but my family is none of your business.
No need to make a scene.
The last thing you want to do is feed scandal to the press.
And we both know Richard's legacy is at stake.
Dad?
I'm asking you to walk away.
And that is exactly what you will do.
Dad?
A car will take you back to your hotel...
It's OK, Arthur, I'm here. Come on.
... and make sure you don't miss your flight.
(###)
Right this way.
Mom.
Mom. Mom.
(###)
(door opening)
(door closing)
(door opening)
Detective Prendergast.
Please, follow me.
Case number D1807.
Thomas Martyn and Margaux Bayot
And Detective Sean Prendergast
of Criminal Assets Bureau, Ireland,
present.
You're here to discuss the events
that led to the death of Luca Rivera.
For the purpose of the tape,
I'm showing
Detective Prendergast
images retrieved
from security cameras
at the Museum aan de Stroom.
Can you confirm that this is DS Berry
formely of the Criminal Assets Bureau in the photograph?
Yes, that's her.
Detective Prendergast will now read a statement
on behalf of DS Berry.
(Clears throat)
"Having identified the third prisoner
"smuggled from La Modelo,
"and with credible intel on the target of the next bomb,
"I proceeded with CTU,
"under the command of Chief Inspector De Jong,
"to the Museum aan de Stroom.
It was there I saw Luca Rivera, holding a detonator."
"I identified myself as police and drew my weapon.
He was immediately surrounded."
"Once I ascertained he was no longer a threat...
(###)
"I holstered my weapon and past him my phone
to call his wife."
(gunshot)
The statement fails to mention
that Chief Inspector De Jong ordered DS Berry to stand down.
To your knowledge,
does DS Berry have
hostage negotiation training?
To my knowledge, she does not.
I refer you to DS Berry statement.
According to that,
Luca Rivera was no longer a threat.
(###)
(sigh)
Hey, Sean. I see Emer couldn't make it.
She really wanted be here,
but with the new job...
Of course.
It's enough that she took the time to make a statement.
Thanks for bringing it to the comity.
No worries.
Pass on my congratulations.
Hmm. Liaison Officer to Madrid,
that's impressive.
Of course, I will.
Officier Thijs was in ahead of me.
Vince's testimony won't have done me any favours.
How are you holding up?
I'm OK.
I'll be able to put this behind me soon, so...
There's something you need to know.
In her statement, Emer was very clear,
Rivera wasn't a threat.
(###)
She's saying I shouldn't have taken the shot?
Ah.
She only wanted Rivera alive
so she could follow the money.
That's all she cared about.
What's the problem with following the money?
We could have gotten some answers.
(###)
You think any answer could be worth risking innocent lives?
Emer believed the risk had passed.
I trust her judgment.
(###)
Sign here, please.
Passent Hussein, Vandaag newspaper.
Can I get a comment
on the Luca Rivera case?
Any questions,
please take it up with the Garda Press Office.
Excuse me...
I have a call to make.
Subtitles
(siren)
Subtitles (siren)
(###)
(phone vibration)
I appreciate you taking the time
to meet with me, DS Wallace.
Claire, please.
You were very persuasive when you called.
When I find a promising candidate,
I can be tenacious.
You've been on my radar for quite some time.
But it was the Hogan case that pushed me to call.
Bringing down a man like that, it's impressive.
I had an excellent team.
Don't down play your part.
(phone vibration)
I'll cut to the chase here, Claire.
I have several clients
that are keen to work with you.
But there's one in particular
that I think is going to be the perfect fit.
How is head of investigations sound to you?
Sounds amazing.
You'd be running a highly skilled international team.
When my client expands into new territories,
additional opportunities for you.
This is what your experience is worth to my client.
With childcare costs being what they are,
not to mention a good school,
and then universities...
You're thorough, I'll give you that.
Can I ask who your client is?
MCS.
Malopa Consultancy Services?
I understand your concerns.
Working for my client could put you at odds
with your current colleagues.
The gamekeeper becomes the poacher, so to speak.
I'm aware of the work they do.
These are the opportunities
that are there for you, Claire.
Don't let an outmoded sense of duty hold you back.
(phone vibration)
It's a tempting offer.
You've given me a lot to think about.
(phone vibration)
Chief.
(###)
(electronic sounds)
(door unlocking)
Hey. Something came up.
I'm gonna have to be in the office.
I will make it home for dinner.
Love you.
(###)
No time off for either of us today.
Do you know what the fallout from this will be?
Let's see the scale of what we're dealing with
before we go there.
I shouldn't be hearing about this from Gately.
I tried to call.
I left two messages.
- How bad is it? - It's bad.
We can't access documents, photos or videos.
So, we're locked out of all our operational files?
Everything. I disconnected us
from the network as soon as it happened,
but all computers here are infected.
The hackers have access to case files?
Yeah.
Including personnel files?
And confidential informants.
This is a shit storm.
We have to stay focussed.
Gately will be putting out a statement.
We just need to make sure that nothing gets leaked out
to the public before she does.
When will Cyber Crime be here?
- Within the hour. - Good.
I'll update Gately.
Don't envy that call.
Fuck!
(###)
OK, let's go.
(###)
(breaking down the door)
Clear!
Room secured!
Target!
(woman): On your knees!
Puta! Voy a matar a tu familia!
Police brutality!
I want to speak to a lawyer!
Malditos malparidos! Hijos de putas!
Yeah.
This is a setup.
You planted those drugs.
I've never seen them before.
Abusadores de mierda!
Quiero un abogado.
Come. Get up.
Coma mierda, hijo de puta!
Voy a matar a tu familia tambien!
(indistinct)
Just try to find out if you can find the source.
(sigh)
- All set? - Yeah.
OK, I know we're all still trying to come to terms
with what happened here and in Dublin,
but we have to work as best as we can
until the hack is resolved.
Chief Bureau Officier Gately is coordinating
the response from Dublin
and Detective Inspector Moore
from the Cyber Crime Bureau
is managing things here. - Thank you, DS Wallace.
Josh.
Well played on stemming the bleed.
It was quick thinking.
We've logged the attack with EC3 in Europol.
My team is setting up
an incident area where we will assess the impact of the breach.
If anyone has opened a suspicious email
or shared or changed a password,
I urged you to come forward and talk to one of my team.
Thanks.
(###)
- Come on, man! - Fuck you, man!
Counterterrorist Unit. What the fuck!
We have a reason to believe you have information
about last year's bombings.
- Fuck you, man! - Fuck me?
We have an audio of you talking
about matters relating to the attacks.
What do you know about the dead man from La Modelo?
Dead man? What dead man?
We know death certs were faked,
we know prisons guards were paid off,
families compensated.
Maybe you didn't realize what these men would do
once they got to Belgium.
I want to speak to a lawyer.
There's no lawyer that can get you out of this.
People have died.
Someone has to pay.
I'm not a terrorist!
I would never kill innocent people!
Yeah, you're a drug dealer, man.
People need someone to blame, trust me.
This is gonna be on your head.
I'm giving you a chance to come clean.
Once we get to Antwerp, it's out of my hands.
(indistinct)
Maybe you didn't plan the bombings,
but you know who paid off the prison guards at La Modelo,
so give me a name.
(indistinct)
(gunshots and screams)
Get down!
(gunshots)
Get me out of here!
I'll tell you what you want to know!
(gunshots)
I'm hit! Help me get out of here!
(shotguns)
Ah!
Ah! ah! ah!
(gunshot)
Ah! ah! ah! ah!
Hey! Hey! Breathe, breathe.
Stay with me. - Ah! ah! ah!
We're gonna get you out of here.
- Ah! - We're gonna get you to a hospital.
Carlos. - They fucking killed me!
(Carlos breathes heavily.)
Ah!
Fuck.
Carlos, tell me what you know
about La Modelo.
Look at me.
Give me a name.
Give me a name!
Gabrio Rojas!
Norah.
Hey!
What's the latest?
Cyber Crime have quarantined the hard drives.
They're assessing the scale of the damage as we speak.
How much do they want?
Four million euros worth of bitcoins.
Christ!
- How was Antwerp? - Awkard.
Christian lost the rag a bit.
I said more than I should have.
We park that and focus on the matter at hand?
Norah is just bringing me up to speed.
What's the worst-case scenario?
All our open cases are at the mercy of the hackers.
God knows what could happen if they sell
that information on. - The Kelly case.
Everything we had for the warrant was on the system.
That was the court on the phone.
I got an extension for the application
until tomorrow morning.
- What are our chances? - Slim to none.
We've been working on Kelly for months.
It's not over yet.
Detective Prendergast, DI Moore.
Hi.
Any theories yet?
The hackers could have exploited the office move
to infiltrate the Shannon VPN as a backdoor
into the secure network in Dublin.
But it's just as likely to be
a phishing or a keylogger attack.
I can't believe this all comes down
to a bloody password or a dodgy email.
Did you look at something you shouldn't have?
No! Of course not!
Do you know anything about the virus?
It's called Ripper.
It's a fresh variant that appears to be
splitting and merging files.
Right now, we don't have a decryption tool.
But we have backups, don't we?
The backup systems were deliberately targeted
as part of the payload.
Ah! Where does that leave us?
With no viable recovery point.
So, you're saying that if we don't pay
the ransom, we lose everything?
CAB does not negotiate with criminals,
let alone fund them.
Subtitles
(###)
Subtitles (###)
Are you OK?
(###)
(indistinct in the background)
Interpol NCB Brussels, please.
I need to request a blue notice.
It's a matter of national security.
Chief Inspector De Jong, CTU Antwerp.
Yeah. Write this down.
Gabrio Rojas.
That's R-O-J-A-S.
Yeah.
(###)
Subtitles
(###)
I have to update the Chief.
She has a call with the Minister in 20 minutes.
Where are we with the hackers?
Yeah, we've told them we need more time
to purchase bitcoins.
Let see how long their patience holds.
That won't go down well. They were adamant.
We don't pay them anything.
I'm just buying us time while I assess
which if any files they exfiltrated from the system.
As soon as we know
whether it's about information or money,
we know how best to respond.
Anything back from EC3?
Nothing yet.
Can I have a word?
Hmm, hmm.
I downloaded an attachment to my work computer
that I thought was from my neighbour,
plans for his extension,
but it wasn't.
I checked, he didn't send the email.
I think this is my fault.
It's possible.
The virus was lying dormant on the system
for weeks, if not longer.
It may or may not have something to do with that email,
but it is something we will have to look into.
I have to call Gately.
And so do you.
(starting engine)
(radio): This will not mean checks at the border
between the Republic and the North.
Gardai is investigating a suspected car bombing
in the Midlands yesterday evening.
but was later released from hospital.
Gardai has sealed off the area
while an investigation is carried out.
All-nighter?
Hem! Is it that obvious?
What's for lunch?
Ah, nothing you'd be interested, Stewart.
It's the healthy option.
Ah, ah!
I heard him from the traffic lads as soon as I got in.
(all): Good morning.
It could be a payback for the Darren Reid hit.
It makes sense
if his people pinned that on Fionn Brannigan.
What could be?
Bibi Melnick was the target of a car bomb last night.
If it was the Reid's crew,
they waited a long time for payback.
From what I've read,
Bibi mixed with some dangerous people.
The question is: why now?
Maybe it has something to do with this.
(Claire): Is this guy Bibi Melnick's father-in-law?
DI Moore, there's something you need to see.
(###)
(sigh)
Linking Richard's death to an attempt on Bibi's life is
a bit of a stretch, Sean.
I recall it was also a stretch to believe
You're missing the point.
Look at the timing.
What was Melnick about to buy?
The port.
Cyber Crime are moving the investigation back to Dublin.
They're coordinating with the Minister's office
on a resolution.
They're going to pay?
That's above our pay grade.
DI Moore would like a word.
OK.
So, it's over?
Not exactly.
DI Moore is staying on
to oversee the restoration of the system.
There's a risk of files being damaged.
(Claire sighs.)
What else?
When they threatened to sell files,
we asked the hackers for proof of life.
Proof of what they intended to sell.
In response,
they released personal information
of a serving CAB officer.
Right.
The officer in question is you.
(gradually fading away): Here is what's going to happen now.
Dublin is leading the investigation
and they've assured me that the information will be reviewed
to ensure that your anonymity has not been compromised.
(###)
If there's any concern...
(someone vomiting)
(toilet flushing and door)
(Josh blows his nose.)
Josh, I'm so sorry.
Do you mind?
Can I have a minute?
Sean.
(sniffing)
We're good.
(###)
(sigh)
You're OK?
Of course I am.
I worked with Stewart on the fraud case
a couple years ago, I trust him.
He'll make sure no other files are leaked.
I knew what I was signing up for when I entered the Bureau.
All the same,
you and Josh were guaranteed anonymity.
Claire, I'll be grand.
Josh is the one you should be worried about.
He's the one going to be looking over his shoulder.
We're taking him for a drink after work.
You're welcome to join.
Thanks.
I'll take a rain check.
We'll catch you again.
Yeah.
It's a shame she couldn't go for a drink.
God knows we all need it after the last couple of days.
Perhaps she doesn't feel the need to get to know us.
Claire is not like that.
I'm just saying I can't see her staying here long, Josh.
She was definitely dressed for an interview yesterday.
Nothing wrong with planning for the future, Norah.
Aren't you?
I am.
Fair enough.
First round is on me.
Sorry, I'm not good company tonight.
I'm just gonna head home.
Ah, come on, Josh. It'll do you good.
I'll catch you tomorrow, guys.
Why did I open that email?
It was socially engineered, Sean.
They blindsided you.
They knew you were dying to gawk at your neighbour's new kitchen.
Come on, let's get out of here.
Goodnight, Claire.
Goodnight.
(their voices fading away)
Say night night to mom.
Goodnight, Mama!
We love you, Detective!
Have sweet dreams.
Ah, ah!
Don't work too hard. See you when you get home.
Love you. Bye.
(Video ends.)
(sigh)
(###)
(phone ringing)
Who is she?
Don't worry about her,
she doesn't speak English.
Whatever you do on your time is your business,
but you're on my clock now.
Where is it?
At the hotel.
That was not the deal.
It's 10 minutes away.
What are you waiting for?
I have to be at the airport in one hour.
Belt.
(###)
How much further?
(###)
(throat noises)
(###)
(engine revving)
(throat noises)
(sigh)
Sorry, I'm late.
How are you doing?
I didn't get much sleep.
But I'm ready for work.
Good, man.
We're updating security privileges on all the devices,
including multi-factor authentication. - Great.
Going forward, it's best practice for minimizing...
Yeah, Moore, you were right,
the files are corrupted.
Come on, let's have a look.
I thought it was a blip.
And there were others.
So far, there are 12 case files
either partially or completely corrupted.
Ah. It's collateral damage.
Best to log the corrupted files and we'll take it from there.
(phone vibration)
Ah. It's EC3.
I have to take this.
DI Moore. Correct.
When did CTU discovered the breach?
Understood.
Absolutely. I'll forward a forensic report
as soon as I have it to see if there are any similarities.
The federal police building in Antwerp discovered
a security breach overnight.
(###)
(Claire): You've read my mind, Josh.
(Josh): What are the odds of that?
Melnick's case files are corrupted.
- You want to check on Brannigan? - Yeah.
Corrupted.
What am I missing here?
CAB had a joint operation with Antwerp CTU last year.
Now the files for the operation are corrupted.
(###)
This changes everything.
It sounds like a coordinated attack.
I need to get back onto EC3.
You need to call your liaison at CTU straight away.
Just to give you a heads up,
Chief Inspector De Long may not be over the moon
to hear from CAB.
(###)
(indistinct conversation)
(###)
(phone ringing)
Chief Inspector De Long.
DS Claire Wallace of CAB.
Is this a bad time to talk, Chief Inspector?
Yeah, I'm going to have to call you back.
No, please, don't hang up.
I need you to listen to me, this is important.
I'm aware the CTU have had a breach.
CAB also suffered what appears to be a ransomware attack.
I think the hacks are connected.
I think you're wrong.
Chief Inspector, I realize that there's been some...
A security sweep on our system found
a bad actor monitoring communications.
It could have had us under surveillance for months,
but there was no contact, there were no demands,
so it's nothing like the attack on CAB.
The Brannigan-Menick files were targeted at our end.
You need to check and see if you can access
the Melnick case files on your system.
I got to go.
(sigh)
(###)
Where are you going?
To pay Bibi Melnick a visit.
Is that wise?
We need answers.
She's the obvious place to start.
OK.
I'm going with you.
(###)
What can you tell me about the Melnick case?
You've read the file.
There's not much in the hard copy.
I'd like to hear your perspective on it, Sean.
(###)
(phone ringing)
DS Wallace.
You were right.
The Brannigan-Melnick files are corrupted.
So, can you tell me what the hell is going on?
I don't know,
but I'm going to find out.
(###)
(camera flash)
(###)
Il y a encore des sacs plastiques?
Ah. Dans l'auto.
(###)
This seems out of the way for Melnick.
Pretty isolated.
Not what you expected?
No.
And on her own out here.
Wait here.
If the two of us land on her doorstep,
her guard will go up.
(###)
(door bell)
Mrs. Melnick?
DS Wallace.
It's Ms. Brannigan.
Can we talk?
What's this about?
You had a lucky escape.
It must have been terrifying.
Any idea who might be trying to hurt you?
I've given a statement.
If you have any questions,
you can talk to the detective assigned to the case.
There's nothing else?
I'm here to tell you
that following a recent incident
we may be reopening your case.
I'm sorry, who are you?
DS Claire Wallace with CAB.
You're right, yesterday was terrifying.
This isn't the time.
I was sorry to hear about your father-in-law.
That can't have been easy.
(house door locked)
(tick-tock)
(ringing)
Hello.
James.
It's me.
Can I speak to Arthur?
Even after what happened yesterday?
He's resting.
He had a tough couple of days.
We all have.
So, there's nothing else?
Please, I just want to hear his voice.
Maybe later when he wakes up.
Thank you.
That means a lot.
I'm worried that whoever it was might come after...
Bibi, why...
why do you insist on bringing trouble into our lives?
This is exactly the reason
why Arthur can't have contact with you.
This isn't my fault.
You chose your path.
As long as you stay away from us,
we will be safe.
Please, James, just...
Will you step up security?
(call ended)
(###)