Original subtitles

This programme contains strong language from the start,

some violent scenes and some scenes which some viewers may find upsetting

My name is Detective Sergent Emer Berry - I'm with the Criminal Assets Bureau.

We'll seize anything purchased with the proceeds of crime.

They're title deeds to a property in Antwerp. Diamonds.

And Antwerp Port is a major hub for smuggling. It's also known for its diamonds.

The commissioner wants you and your team to assist

Christian's Anti-terrorist Department

in a joint investigation unit on this.

We have managed to extract a sample of DNA. The bomber?

He's Colombian.

All inmates in La Modelo prison.

These poor bastards are easy pickings for someone.

Luca Rivera.

He's on his way. Or he's already here.

Why here? I need a corporate presence in the EU.

Are you sure it's big enough?

Well, if it's going to be corporate headquarters, it's got to be big.

These images were taken the night before the bombing.

There is another attack.

My wife is prepared to help you prevent an imminent terrorist attack

in return for immunity from all other charges.

Police! Put your hands in the air!

Hands in the air!

He must stand down! He doesn't want to do it.

I had to do it, Emer.

He didn't pose a threat. He had a bomb.

What about the people behind all this?

We have their images. We will find them.

All of this has never been about anything except you

and your father's fucking legacy!

If you knew the whole story, you'd see this differently.

I did everything you asked.

Yes, and your discretion was greatly appreciated.

You said you'd protect me!

And I still am. That's why you're still here.

You were amazing. Dad, the door's locked.

Oh. Just let me get that for you.

Go tell your grandad about your yellow belt.

Grandad!

Grandad!

Grandad!

Grandad!

Dad!

Arthur!

Arthur?

He won't wake up.

Good morning. Hello.

Detective Sean Prendergast, Criminal Assets Bureau.

Sign here, please.

CHURCH BELLS RING

Bibi.

Frances. It's been a while.

Yes.

You were asked to stay away.

Hmm? James was quite clear about that.

If you'll excuse me, my son needs me.

I'm so sorry to hear about the divorce.

It's been a lot for James.

Take your hand off me.

I think it's best for everyone that you leave.

I'm sure you don't want to add to the family's upset.

Especially considering everything you've put them through.

You may have taken over Richard's company,

but my family is none of your business.

No need to make a scene.

The last thing we want to do is feed scandal to the press.

And we both know Richard's legacy is at stake.

Dad? Dad?

I'm asking you to walk away.

And that is exactly what you will do.

Dad?

A car will take you back to your hotel...

It's OK, Arthur, I'm here. Come on.

..and make sure you don't miss your flight.

Right this way.

Mum?

Mum, Mum.

Detective Prendergast.

Please, follow me.

Case number D1807.

Thomas Martyn and Margaux Bayot of Comity P,

and Detective Sean Prendergast

of Criminal Assets Bureau, Ireland present.

You're here to discuss the events

that led to the death of Luca Rivera.

For the purpose of the tape,

I'm showing Detective Prendergast

images retrieved from security cameras

at the Museum aan de Stroom.

Can you confirm that this is DS Berry,

formerly of the Criminal Assets Bureau in the photograph?

Yes, that's her.

Detective Prendergast will now read a statement

on behalf of DS Berry.

"Having identified the third prisoner smuggled from La Modelo,

"and with credible intel on the target of the next bomb,

"I proceeded with CTU,

"under the command of Chief Inspector De Jong,

"to the Museum aan de Stroom.

"It was there I saw Luca Rivera, holding a detonator."

"I identified myself as police and drew my weapon.

"He was immediately surrounded."

"Once I ascertained he was no longer a threat...

"..I holstered my weapon and past him my phone

"to call his wife."

The statement fails to mention that Chief Inspector De Jong

ordered DS Berry to stand down.

To your knowledge, does DS Berry have

hostage negotiation training?

To my knowledge, she does not.

I refer you to DS Berry's statement.

According to that, Luca Rivera was no longer a threat.

Hey, Sean. I see Emer couldn't make it.

She really wanted be here, but with the new job...

Of course.

It's enough that she took the time to make a statement.

Thanks for bringing it to the comity.

No worries.

Pass on my congratulations.

Liaison Officer to Madrid, that's impressive.

Of course, I will.

Officier Thijs was in ahead of me.

Vince's testimony won't have done me any favours.

How are you holding up?

I'm OK.

I'll be able to put this behind me soon, so...

There's something you need to know.

In her statement, Emer was very clear,

Rivera wasn't a threat.

She's saying I shouldn't have taken the shot?

She only wanted Rivera alive, so she could follow the money.

That's all she cared about.

What's the problem with following the money?

We could have gotten some answers.

You think any answer could be worth risking innocent lives?

Emer believed the risk had passed. I trust her judgment.

Sign here, please.

Passent Hussein, Vandaag newspaper.

Can I get a comment on the Luca Rivera case?

Any questions, please take it up with the Garda Press Office.

Excuse me,

I have a call to make.

POLICE SIREN WAILS

MOBILE ALERT SOUNDS

I appreciate you taking the time to meet with me, DS Wallace.

Claire, please.

You were very persuasive when you called.

When I find a promising candidate,

I can be tenacious.

You've been on my radar for quite some time.

But it was the Hogan case that pushed me to call.

Bringing down a man like that, it's impressive.

I had an excellent team.

Don't downplay your part.

MOBILE ALERT SOUNDS

I'll cut to the chase here, Claire.

I've several clients that are keen to work with you.

But there's one in particular

that I think is going to be the perfect fit.

How does Head of Investigations sound to you?

Sounds amazing.

You'd be running a highly- skilled international team.

When my client expands into new territories,

additional opportunities for you.

This is what your experience is worth to my client.

With childcare costs being what they are,

not to mention a good school,

and then universities...

You're thorough, I'll give you that.

Can I ask who your client is?

MCS.

Malopa Consultancy Services.

I understand your concerns.

Working for my client could put you at odds

with your current colleagues.

The gamekeeper becomes the poacher, so to speak.

I'm aware of the work they do.

These are the opportunities

that are there for you, Claire.

Don't let an outmoded sense of duty hold you back.

MOBILE PHONE RINGS

It's a tempting offer.

You've given me a lot to think about.

Chief.

Hey. Something came up.

I'm gonna have to be in the office.

I won't make it home for dinner. Love you.

No time off for either of us today.

Do you know what the fallout from this will be?

Let's see the scale of what we're dealing with

before we go there.

I shouldn't be hearing about this from Gately.

I tried calling.

I left two messages.

How bad is it? It's bad.

We can't access documents, photos or videos.

So, we're locked out of all our operational files?

Everything. I disconnected us from the network

as soon as it happened, but all computers here are infected.

The hackers have access to case files? Yeah.

Including personnel files?

And confidential informants.

This is a shit storm. We have to stay focused.

Gately will be putting out a statement.

We just need to make sure that nothing gets leaked out

to the public before she does.

When will Cyber Crime be here?

Within the hour. Good.

I'll update Gately.

Don't envy that call.

Fuck!

OK, let's go.

Clear! Clear.

Room secured!

Target!

On your knees!

Puta! Voy a matar a tu familia!

Police brutality!

I want to speak to a lawyer!

Malditos malparidos! Hijos de putas!

Yeah. Come on.

This is a set-up. You planted those drugs.

I've never seen them before.

Abusadores de mierda!

Quiero un abogado.

Come. Get up.

Coma mierda, hijo de puta!

Voy a matar a tu familia tambien!

Just try to find out if you can find the source.

All set? Yeah.

OK, I know we're all still trying to come to terms

with what happened here and in Dublin,

but we have to work as best as we can until the hack is resolved.

Chief Bureau Officer Gately

is coordinating the response from Dublin

and Detective Inspector Moore from the Cyber Crimes Bureau

is managing things here. Thank you, DS Wallace.

Josh.

Well played on stemming the bleed.

It was quick thinking.

We've logged the attack with EC3 in Europol.

My team are setting up an incident area,

where we will assess the impact of the breach.

If anyone has opened a suspicious email

or shared or changed a password,

I urge you to come forward and talk to one of my team.

Thanks.

Come on, man! Fuck you!

Counterterrorist Unit. What the fuck!

We have a reason to believe you have information

about last year's bombings.

Fuck you, man! Fuck me?

We have an audio of you talking

about matters relating to the attacks.

What do you know about the dead man from La Modelo?

Dead man? What dead man?

We know death certs were faked,

we know prison guards were paid off, families compensated.

Maybe you didn't realise what these men would do

once they got to Belgium.

I want to speak to a lawyer.

There's no lawyer that can get you out of this.

People have died. Someone has to pay.

I'm not a terrorist!

I would never kill innocent people!

Yeah, you're a drug dealer, man.

People need someone to blame, trust me.

This is gonna be on your head.

I'm giving you a chance to come clean.

Once we get to Antwerp, it's out of my hands.

Maybe you didn't plan the bombings,

but you know who paid off the prison guards at La Modelo,

so give me a name.

Get down!

Get me out of here! I'll tell you what you want to know!

I'm hit! Help me get out of here.

Agh!

Ah! Ah! Ah! Ah!

Hey! Hey! Breathe, breathe.

Stay with me. Ah! Ah! Ah!

We're gonna get you out of here.

Ah! We're gonna get you to a hospital.

Carlos. They fucking killed me!

Ah!

Fuck. Carlos, tell me what you know

about La Modelo.

Look at me.

Give me a name.

Give me a name!

Gabrio Rojas!

Gabrio Rojas!

Norah.

Hey!

What's the latest?

Cyber Crime have quarantined the hard drives.

They're assessing the scale of the damage as we speak.

How much do they want?

Four million euros worth of bitcoins.

Christ! How was Antwerp? Awkward.

Christian lost the rag a bit.

I said more than I should have.

We park that and focus on the matter at hand?

Norah, just bring me up to speed.

What's the worst-case scenario?

All our open cases are at the mercy of the hackers.

God knows what could happen if they sell that information on.

The Kelly case. Everything we had for the warrant was on the system.

That was the court on the phone.

I got an extension for the application till tomorrow morning.

What are our chances? Slim to none.

We've been working on Kelly for months.

It's not over yet.

Detective Prendergast, DI Moore.

Hi. Any theories yet?

The hackers could have exploited the office move

to infiltrate the Shannon VPN as a back door

into the secure network in Dublin.

But it's just as likely to be a phishing or a keylogger attack.

I can't believe this all comes down to a bloody password

or a dodgy email.

Did you look at something you shouldn't have?

No! Of course not.

Do we know anything about the virus?

It's called Ripper.

It's a fresh variant that appears to be splitting and merging files.

Right now, we don't have a decryption tool.

But we have backups, don't we?

The backup systems were deliberately targeted as part of the payload.

Urgh! Where does that leave us?

With no viable recovery point.

So, you're saying that if we don't pay the ransom, we lose everything?

CAB does not negotiate with criminals,

let alone fund them.

Are you OK?

Interpol NCB Brussels, please.

I need to request a blue notice.

It's a matter of national security.

Chief Inspector De Jong, CTU Antwerp.

Yeah. Write this down.

Gabrio Rojas.

That's R-O-J-A-S.

Yeah.

I have to update the Chief.

She has a call with the minister in 20 minutes.

Where are we with the hackers?

Yeah, we've told them we need more time to purchase bitcoins.

Let's see how long their patience holds.

That won't go down well. They were adamant.

We don't pay them anything.

I'm just buying us time while I assess which, if any, files

they exfiltrated from the system.

As soon as we know whether it's about information or money,

we'll know how best to respond.

Anything back from EC3?

Nothing yet.

Can I have a word?

Mm-hm.

I downloaded an attachment to my work computer

that I thought was from my neighbour, plans for his extension,

but it wasn't.

I checked, he didn't send the email.

I think this is my fault.

It's possible the virus was lying dormant on the system

for weeks, if not longer.

It may or may not have something to do with that email,

but it is something we will have to look into.

I have to call Gately,

and so do you.

RADIO: This will not mean checks at the border

between the Republic and the North.

Gardai is investigating a suspected car bombing

in the Midlands yesterday evening.

A woman was treated for minor injuries

but was later released from hospital.

Gardai has sealed off the area

while an investigation is carried out.

All-nighter?

HE CLEARS THROAT

Is it that obvious?

What's for lunch?

Oh, nothing you'd be interested, Stewart.

It's the healthy option.

Ah-hah!

I heard him from the traffic lads as soon as I got in.

Morning. Morning.

It could be a payback for the Darren Reid hit.

It makes sense if his people pinned that on Fionn Brannigan.

What could be?

Bibi Melnick was the target of a car bomb last night.

If it was the Reid crew, they waited a long time for payback.

From what I've read, Bibi mixed with some dangerous people.

The question is, why now?

Maybe it has something to do with this.

Is this guy Bibi Melnick's father-in-law?

DI Moore. There's something you need to see.

Linking Richard's death to an attempt on Bibi's life

is a bit of a stretch, Sean.

I recall it was also a stretch to believe she was capable

of smuggling bombers in shipping containers.

You're missing the point.

Look at the timing.

What was Melnick about to buy?

The port. Cyber Crime are moving the investigation back to Dublin.

They're coordinating with the Minister's office on a resolution.

They're going to pay?

That's above our paygrade.

DI Moore would like a word.

OK.

So, it's over?

Not exactly.

DI Moore is staying on to oversee the restoration of the system.

There's a risk of files being damaged.

What else?

When they threatened to sell files,

we asked the hackers for proof of life.

Proof of what they intended to sell.

In response, they released personal information

of a serving CAB officer.

Right.

The officer in question is you.

Here's what's going to happen now.

Dublin is leading the investigation

and they've assured me that the information will be reviewed

to ensure that your anonymity has not been compromised.

If there is any concern...

Josh, I'm so sorry.

Do you mind?

Can I have a minute?

Sean.

We're good.

You OK? Of course I am.

I worked with Stewart on a fraud case

a couple years ago, I trust him.

He'll make sure no other files are leaked.

I knew what I was signing up for when I entered the Bureau.

All the same, you and Josh were guaranteed anonymity.

Claire, I'll be grand.

Josh is the one you should be worried about.

He's the one going to be looking over his shoulder.

We're taking him for a drink after work.

You're welcome to join.

Thanks.

I'll take a rain check. We'll catch you again.

Yeah.

Pity she couldn't come for a drink.

God knows we all need it after the last couple of days.

Perhaps she doesn't feel the need to get to know us.

Claire's not like that.

I'm just saying, I can't see her staying here long, Josh.

She was definitely dressed for an interview yesterday.

Nothing wrong with planning for the future, Norah.

Aren't you?

I am. Fair enough.

First round's on me.

Sorry, I'm not good company tonight.

I'm just gonna head home.

Oh, come on, Josh. It'll do you good.

I'll catch you tomorrow, guys.

Why did I open that email?

It was socially engineered, Sean. They blindsided you.

They knew you were dying for a gawk at your neighbour's new kitchen.

Come on, let's get out of here.

Night, Claire. Night.

Say night-night to Mum. Goodnight, Mama!

We love you, Detective!

Have sweet dreams.

Ahh!

Don't work too hard. See you when you get home.

Love you. Bye.

MOBILE RINGS

Who is she? Don't worry about her,

she doesn't speak English.

Whatever you do on your time is your business,

but you're on my clock now.

Where is it?

At the hotel.

That was not the deal.

It's ten minutes away.

What are you waiting for? I have to be at the airport in one hour.

Belt.

How much further?

Sorry, I'm late. How are you doing?

I didn't get much sleep.

But I'm ready for work.

Good, man.

We're updating security privileges on all the devices,

including multi-factor authentication. Great.

Going forward, it's best practice for minimising...

Yeah, Moore, you were right,

the files are corrupted.

Come on, let's have a look.

I thought it was a blip.

Then there were others.

So far, there are 12 case files

either partially or completely corrupted.

Ah. It's collateral damage.

Best to log the corrupted files and we'll take it from there.

Ah. It's EC3.

I have to take this.

DI Moore. Correct.

When did CTU discover the breach?

Understood.

Absolutely. I'll forward a forensic report

as soon as I have it to see if there are any similarities.

The federal police building in Antwerp discovered

a security breach overnight.

You've read my mind, Josh. What are the odds of that?

Melnick's case files are corrupted.

You want to check on Brannigan? Yeah.

Corrupted.

What am I missing here?

CAB had a joint operation with Antwerp CTU last year.

Now the files for that operation are corrupt.

This changes everything. It sounds like a coordinated attack.

I need to get back onto EC3.

You need to call your liaison at CTU straight away.

Just to give you a heads up, Chief Inspector De Long

may not be over the moon to hear from CAB.

MOBILE RINGS

Chief Inspector De Long.

DS Claire Wallace of CAB.

Is this a bad time to talk, Chief Inspector?

Yeah, I'm going to have to call you back.

No, please, don't hang up.

I need you to listen to me, this is important.

I'm aware that CTU has had a breach.

CAB also suffered what appears to be a ransomware attack.

I think the hacks are connected.

I think you're wrong.

Chief Inspector, I realise that there's been some...

A security sweep on our system found a bad actor

monitoring communications.

They could have had us under surveillance for months,

but there was no contact, there were no demands,

so it's nothing like the attack on CAB.

The Brannigan-Menick files were targeted our end.

You need to check and see if you can access the Melnick case files

on your system.

I got to go.

Where are you going?

To pay Bibi Melnick a visit.

Is that wise?

We need answers.

She's the obvious place to start.

OK. I'm going with you.

What can you tell me about the Melnick case?

You've read the file.

There's not much in the hard copy.

I'd like to hear your perspective on it, Sean.

DS Wallace. You were right.

The Brannigan-Melnick files are corrupted.

So, can you tell me what the hell is going on?

I don't know, but I'm going to find out.

Il y a encore des sacs plastiques? Ah. Dans l'auto.

This seems out of the way for Melnick.

Pretty isolated.

Not what you expected?

No.

And on her own out here.

Mother's house, apparently.

Wait here. If the two of us land on her doorstep,

her guard will go up.

DOORBELL CHIMES

Mrs Melnick?

DS Wallace.

It's Ms Brannigan.

Can we talk?

What's this about?

You had a lucky escape.

It must have been terrifying.

Any idea who might be trying to hurt you?

I've given a statement.

If you have any questions,

you can talk to the detective assigned to the case.

There's nothing else?

I'm here to tell you that following a recent incident,

we may be reopening your case.

I'm sorry, who are you?

DS Claire Wallace with CAB.

You're right, yesterday was terrifying.

This isn't the time.

I was sorry to hear about your father-in-law.

That can't have been easy.

MOBILE CALLING TONE

Hello.

James. It's me.

Can I speak to Arthur?

We agreed no unscheduled calls.

Even after what happened yesterday?

He's resting.

He's had a tough couple of days.

We all have.

So, there's nothing else?

Please, I just want to hear his voice.

Maybe later when he wakes up.

Thank you.

That means a lot.

I'm worried that whoever it was might come after...

Bibi, why...

Why do you insist on bringing trouble into our lives?

This is exactly the reason why Arthur can't have contact with you.

This isn't my fault.

You chose your path.

As long as you stay away from us,

we will be safe.

Please, James, just...

Will you step up security?