02x01 - Episode 1

[bunniefuu]

- My name is Detective

Sergent Emer Berry

with the Criminal

Assets Bureau.

We'll seize anything purchased

with the proceeds of crime.

- They're title deeds

to a property in Antwerp.

- Diamonds.

- And Antwerp Port is

a major hub for smuggling.

- It's also known

for its diamonds.

- The commissioner

wants you and your team

to assist Christian's

antiterrorist department

on a joint investigation

unit on this.

- We have managed to extract

a sample of DNA.

- The b*mber?

- He's Colombian.

- All inmates

in La Modelo prison.

- These poor b*stards are easy

pickings for someone.

- Luca Rivera.

- He's on his way.

- Or he's already here.

- Why here?

- I need a corporate

presence in the EU.

- Are you sure it's big enough?

- Corporate headquarters,

it's got to be big.

- These images were taken

the night before the bombing.

- There is another attack.

- My wife is prepared

to help you prevent

an imminent t*rror1st attack

in return for immunity

from all other charges.

- Police! Put your hands

in the air!

- Hands in the air!

- He must stand down!

- He doesn't want to do it.

- I had to do it, Emer.

- He didn't pose a threat.

- He had a b*mb.

- What about the people

behind all this?

- We have their images.

We will find them.

- All of this has never been

about anything except you

and your father's

f*cking legacy!

- If you knew the whole story,

you'd see this differently.

I did everything you asked.

- Yes, and your discretion

was great, I appreciate it.

- You said you'd protect me!

- And I still am.

That's why you're still here.

- Dad, the door is locked.

- Ah. Just let me get

that for you.

Go tell your granddad

about your yellow belt.

- Granddad!

Granddad!

Granddad!

Granddad!

- Dad!

Arthur!

Arthur?

- He won't wake up.

- Good morning.

- Hello.

- Detective Sean Prendergast,

Criminal Assets Bureau.

- Sign here, please.

- Bibi.

- Frances.

It's been a while.

- Yes.

You were asked to stay away.

Hmm? James was

quite clear about that.

- If you'll excuse me,

my son needs me.

- I'm so sorry to hear

about the divorce.

It's been a lot for James.

- Take your hand off me.

- I think it's best

for everyone that you leave.

I'm sure you don't want

to add to the family's upset.

Especially considering

everything you've put

them through.

- You may have taken over

Richard's company,

but my family is none

of your business.

- No need to make a scene.

The last thing you want to do

is feed scandal to the press.

And we both know Richard's

legacy is at stake.

- Dad?

Dad?

- I'm asking you to walk away.

And that is exactly

what you will do.

- Dad?

- A car will take you

back to your hotel

- It's OK, Arthur,

I'm here. Come on.

- and make sure

you don't miss your flight.

- Right this way.

- Mom.

Mom. Mom.

- Detective Prendergast.

Please, follow me.

Case number D1807.

Thomas Martyn

and Margaux Bayot

And Detective Sean Prendergast

of Criminal Assets

Bureau, Ireland,

present.

You're here

to discuss the events

that led to the death

of Luca Rivera.

For the purpose of the tape,

I'm showing

Detective Prendergast

images retrieved

from security cameras

at the Museum aan de Stroom.

Can you confirm

that this is DS Berry

formely of the Criminal Assets

Bureau in the photograph?

- Yes, that's her.

- Detective Prendergast

will now read a statement

on behalf of DS Berry.

"Having identified

the third prisoner

"smuggled from La Modelo,

"and with credible intel

on the target of the next b*mb,

"I proceeded with CTU,

"under the command

of Chief Inspector De Jong,

"to the Museum aan de Stroom.

It was there I saw Luca Rivera,

holding a detonator."

"I identified myself as police

and drew my weapon.

He was immediately surrounded."

"Once I ascertained he was

no longer a threat

"I holstered my weapon

and past him my phone

to call his wife."

- The statement

fails to mention

that Chief Inspector De Jong

ordered DS Berry to stand down.

To your knowledge,

does DS Berry have

hostage negotiation training?

- To my knowledge, she does not.

- I refer you

to DS Berry statement.

According to that,

Luca Rivera was

no longer a threat.

- Hey, Sean. I see

Emer couldn't make it.

- She really wanted be here,

but with the new job

- Of course.

It's enough that she took

the time to make a statement.

Thanks for bringing it

to the comity.

- No worries.

- Pass on my congratulations.

Hmm. Liaison Officer to Madrid,

that's impressive.

- Of course, I will.

Officier Thijs was in

ahead of me.

- Vince's testimony won't have

done me any favours.

- How are you holding up?

- I'm OK.

I'll be able to put this

behind me soon, so

- There's something

you need to know.

In her statement,

Emer was very clear,

Rivera wasn't a threat.

- She's saying I shouldn't

have taken the shot?

Ah.

She only wanted Rivera alive

so she could follow the money.

That's all she cared about.

- What's the problem

with following the money?

We could have gotten

some answers.

- You think any answer could be

worth risking innocent lives?

- Emer believed

the risk had passed.

I trust her judgment.

- Sign here, please.

- Passent Hussein,

Vandaag newspaper.

Can I get a comment

on the Luca Rivera case?

- Any questions,

please take it up with

the Garda Press Office.

Excuse me

I have a call to make.

- I appreciate

you taking the time

to meet with me,

DS Wallace.

- Claire, please.

You were very persuasive

when you called.

- When I find

a promising candidate,

I can be tenacious.

You've been on my radar

for quite some time.

But it was the Hogan case

that pushed me to call.

Bringing down a man

like that, it's impressive.

- I had an excellent team.

- Don't down play your part.

I'll cut to the chase

here, Claire.

I have several clients

that are keen to work with you.

But there's one in particular

that I think is going

to be the perfect fit.

How is head of investigations

sound to you?

- Sounds amazing.

- You'd be running a highly

skilled international team.

When my client expands

into new territories,

additional opportunities

for you.

This is what your experience

is worth to my client.

With childcare costs

being what they are,

not to mention a good school,

and then universities

- You're thorough,

I'll give you that.

Can I ask who your client is?

- MCS.

- Malopa Consultancy Services?

- I understand your concerns.

Working for my client

could put you at odds

with your current colleagues.

The gamekeeper becomes

the poacher, so to speak.

- I'm aware of the work they do.

- These are the opportunities

that are there

for you, Claire.

Don't let an outmoded sense

of duty hold you back.

- It's a tempting offer.

You've given me a lot

to think about.

Chief.

Hey. Something came up.

I'm gonna have to be

in the office.

I will make it home for dinner.

Love you.

- No time off for

either of us today.

Do you know what the fallout

from this will be?

- Let's see the scale

of what we're dealing with

before we go there.

I shouldn't be hearing

about this from Gately.

- I tried to call.

I left two messages.

- How bad is it?

- It's bad.

We can't access documents,

photos or videos.

- So, we're locked out

of all our operational files?

- Everything.

I disconnected us

from the network

as soon as it happened,

but all computers

here are infected.

- The hackers have

access to case files?

- Yeah.

- Including personnel files?

- And confidential

informants.

- This is a sh*t storm.

- We have to stay focussed.

Gately will be putting

out a statement.

We just need to make sure

that nothing gets leaked out

to the public before she does.

When will Cyber Crime

be here?

- Within the hour.

- Good.

I'll update Gately.

Don't envy that call.

f*ck!

- OK, let's go.

- Clear!

Room secured!

- Target!

- On your knees!

- Puta! Voy a matar

a tu familia!

Police brutality!

I want to speak to a lawyer!

Malditos malparidos!

Hijos de putas!

- Yeah.

- This is a setup.

You planted those drugs.

I've never seen them before.

Abusadores de mierda!

Quiero un abogado.

- Come. Get up.

- Coma mierda, hijo de puta!

Voy a matar

a tu familia tambien!

- Just try to find out

if you can find the source.

- All set?

- Yeah.

OK, I know we're all still

trying to come to terms

with what happened here

and in Dublin,

but we have to work

as best as we can

until the hack

is resolved.

Chief Bureau Officier Gately

is coordinating

the response from Dublin

and Detective Inspector Moore

from the Cyber Crime Bureau

is managing things here.

- Thank you, DS Wallace.

Josh.

Well played

on stemming the bleed.

It was quick thinking.

We've logged the attack

with EC3 in Europol.

My team is setting up

an incident area where we will

assess the impact of the breach.

If anyone has opened

a suspicious email

or shared or changed

a password,

I urged you to come forward

and talk to one of my team.

- Thanks.

- Come on,

man!

- f*ck you, man!

- Counterterrorist Unit.

What the f*ck!

- We have a reason to believe

you have information

about last year's bombings.

- f*ck you, man!

- f*ck me?

We have an audio

of you talking

about matters relating

to the attacks.

What do you know about

the dead man from La Modelo?

- Dead man?

What dead man?

- We know death certs

were faked,

we know prisons guards

were paid off,

families compensated.

Maybe you didn't realize

what these men would do

once they got to Belgium.

- I want to speak to a lawyer.

- There's no lawyer that can

get you out of this.

People have died.

Someone has to pay.

- I'm not a t*rror1st!

I would never k*ll

innocent people!

- Yeah, you're

a drug dealer, man.

People need someone

to blame, trust me.

This is gonna

be on your head.

I'm giving you a chance

to come clean.

Once we get to Antwerp,

it's out of my hands.

Maybe you didn't plan

the bombings,

but you know who paid off

the prison guards at La Modelo,

so give me a name.

Get down!

- Get me out of here!

I'll tell you

what you want to know!

I'm hit! Help me

get out of here!

- Ah!

- Ah! ah! ah!

- Ah! ah! ah! ah!

- Hey! Hey!

Breathe, breathe.

Stay with me.

- Ah! ah! ah!

- We're gonna get you

out of here.

- Ah!

- We're gonna get you

to a hospital.

Carlos.

- They f*cking k*lled me!

Ah!

- f*ck.

Carlos, tell me what you know

about La Modelo.

Look at me.

Give me a name.

Give me a name!

- Gabrio Rojas!

Gabrio Rojas!

- Norah.

- Hey!

- What's the latest?

- Cyber Crime have quarantined

the hard drives.

They're assessing the scale

of the damage as we speak.

- How much do they want?

- Four million euros

worth of bitcoins.

- Christ!

- How was Antwerp?

- Awkard.

Christian lost the rag a bit.

I said more than I should have.

- We park that and focus

on the matter at hand?

- Norah is just

bringing me up to speed.

What's the worst-case scenario?

- All our open cases are

at the mercy of the hackers.

- God knows what could

happen if they sell

that information on.

- The Kelly case.

- Everything we had for

the warrant was on the system.

- That was the court

on the phone.

I got an extension

for the application

until tomorrow morning.

- What are

our chances?

- Slim to none.

- We've been working

on Kelly for months.

- It's not over yet.

Detective Prendergast,

DI Moore.

- Hi.

- Any theories yet?

- The hackers could have

exploited the office move

to infiltrate the Shannon VPN

as a backdoor

into the secure network

in Dublin.

But it's just as likely to be

a phishing or

a keylogger attack.

- I can't believe this all

comes down

to a bloody password

or a dodgy email.

Did you look at something

you shouldn't have?

- No! Of course not!

- Do you know anything

about the virus?

- It's called Ripper.

It's a fresh variant

that appears to be

splitting and merging files.

Right now, we don't have

a decryption tool.

- But we have backups,

don't we?

- The backup systems were

deliberately targeted

as part of the payload.

- Ah! Where does that leave us?

- With no viable

recovery point.

- So, you're saying

that if we don't pay

the ransom,

we lose everything?

- CAB does not negotiate

with criminals,

let alone fund them.

- Are you OK?

- Interpol NCB Brussels, please.

I need to request a blue notice.

It's a matter

of national security.

Chief Inspector De Jong,

CTU Antwerp.

Yeah. Write this down.

Gabrio Rojas.

That's R-O-J-A-S.

Yeah.

- I have to update

the Chief.

She has a call with

the Minister in 20 minutes.

Where are we

with the hackers?

- Yeah, we've told them

we need more time

to purchase bitcoins.

Let see how long

their patience holds.

- That won't go down well.

They were adamant.

We don't pay them anything.

- I'm just buying us time

while I assess

which if any files they

exfiltrated from the system.

As soon as we know

whether it's about

information or money,

we know how best to respond.

- Anything back from EC3?

- Nothing yet.

- Can I have

a word?

- Hmm, hmm.

- I downloaded an attachment

to my work computer

that I thought was

from my neighbour,

plans for his extension,

but it wasn't.

I checked, he didn't

send the email.

I think this is my fault.

- It's possible.

The virus was lying

dormant on the system

for weeks,

if not longer.

It may or may not have something

to do with that email,

but it is something

we will have to look into.

- I have to call Gately.

And so do you.

- This will not mean

checks at the border

between the Republic

and the North.

Gardai is investigating

a suspected car bombing

in the Midlands

yesterday evening.

but was later released

from hospital.

Gardai has sealed off the area

while an investigation

is carried out.

- All-nighter?

- Hem! Is it that obvious?

What's for lunch?

- Ah, nothing you'd be

interested, Stewart.

It's the healthy option.

- Ah, ah!

- I heard him from the traffic

lads as soon as I got in.

- Good morning.

- It could be a payback

for the Darren Reid hit.

- It makes sense

if his people pinned that

on Fionn Brannigan.

- What could be?

- Bibi Melnick was the target

of a car b*mb last night.

- If it was

the Reid's crew,

they waited a long time

for payback.

From what I've read,

Bibi mixed with

some dangerous people.

The question is: why now?

- Maybe it has something

to do with this.

- Is this guy

Bibi Melnick's father-in-law?

- DI Moore, there's

something you need to see.

- Linking Richard's death

to an attempt on Bibi's life is

a bit of a stretch, Sean.

- I recall it was also

a stretch to believe

- You're missing the point.

Look at the timing.

What was Melnick about to buy?

- The port.

- Cyber Crime are moving the

investigation back to Dublin.

They're coordinating

with the Minister's office

on a resolution.

- They're going to pay?

- That's above our pay grade.

DI Moore would like a word.

- OK.

- So, it's over?

- Not exactly.

DI Moore is staying on

to oversee the restoration

of the system.

There's a risk of files

being damaged.

- What else?

- When they threatened

to sell files,

we asked the hackers

for proof of life.

Proof of what

they intended to sell.

In response,

they released personal

information

of a serving CAB officer.

- Right.

- The officer

in question is you.

Here is

what's going to happen now.

Dublin is leading

the investigation

and they've assured me that

the information will be reviewed

to ensure that your anonymity

has not been compromised.

If there's any concern

- Josh, I'm so sorry.

- Do you mind?

Can I have a minute?

Sean.

We're good.

- You're OK?

- Of course I am.

- I worked with Stewart

on the fraud case

a couple years ago,

I trust him.

He'll make sure

no other files are leaked.

- I knew what I was signing up

for when I entered the Bureau.

- All the same,

you and Josh were

guaranteed anonymity.

- Claire, I'll be grand.

Josh is the one you should

be worried about.

He's the one going to be

looking over his shoulder.

We're taking him

for a drink after work.

You're welcome to join.

- Thanks.

I'll take a rain check.

- We'll catch you again.

- Yeah.

- It's a shame she couldn't

go for a drink.

God knows we all need it

after the last couple of days.

- Perhaps she doesn't feel

the need to get to know us.

- Claire is not like that.

- I'm just saying I can't see

her staying here long, Josh.

She was definitely dressed

for an interview yesterday.

- Nothing wrong with planning

for the future, Norah.

Aren't you?

I am.

- Fair enough.

- First round is on me.

- Sorry, I'm not

good company tonight.

I'm just gonna head home.

- Ah, come on, Josh.

It'll do you good.

- I'll catch you tomorrow, guys.

- Why did I open

that email?

- It was socially

engineered, Sean.

They blindsided you.

They knew you were dying to gawk

at your neighbour's new kitchen.

Come on, let's get out of here.

Goodnight, Claire.

- Goodnight.

- Say night night to mom.

- Goodnight, Mama!

We love you, Detective!

Have sweet dreams.

Ah, ah!

- Don't work too hard.

See you when you get home.

Love you. Bye.

- Who is she?

- Don't worry about her,

she doesn't speak English.

- Whatever you do on your time

is your business,

but you're on my clock now.

Where is it?

- At the hotel.

- That was not the deal.

- It's 10 minutes away.

- What are you waiting for?

I have to be at the airport

in one hour.

- Belt.

- How much further?

- Sorry, I'm late.

- How are you doing?

- I didn't get much sleep.

But I'm ready for work.

- Good, man.

- We're updating security

privileges on all the devices,

including multi-factor

authentication.

- Great.

- Going forward, it's best

practice for minimizing

- Yeah, Moore,

you were right,

the files are corrupted.

- Come on, let's have a look.

- I thought it was a blip.

And there were others.

So far, there are 12 case files

either partially

or completely corrupted.

- Ah. It's collateral damage.

Best to log the corrupted files

and we'll take it from there.

Ah. It's EC3.

I have to take this.

DI Moore.

Correct.

When did CTU discovered

the breach?

Understood.

Absolutely. I'll forward

a forensic report

as soon as I have it to see

if there are any similarities.

The federal police building

in Antwerp discovered

a security breach overnight.

You've read my mind, Josh.

What are the odds of that?

Melnick's case files

are corrupted.

- You want to check

on Brannigan?

- Yeah.

Corrupted.

- What am I missing here?

- CAB had a joint operation

with Antwerp CTU last year.

Now the files for the

operation are corrupted.

- This changes everything.

It sounds like

a coordinated attack.

I need to get back onto EC3.

You need to call your liaison

at CTU straight away.

- Just to give you a heads up,

Chief Inspector De Long

may not be over the moon

to hear from CAB.

- Chief Inspector De Long.

- DS Claire Wallace of CAB.

Is this a bad time to talk,

Chief Inspector?

- Yeah, I'm going to have

to call you back.

- No, please, don't hang up.

I need you to listen to me,

this is important.

I'm aware the CTU

have had a breach.

CAB also suffered what appears

to be a ransomware attack.

I think the hacks

are connected.

- I think you're wrong.

- Chief Inspector, I realize

that there's been some

- A security sweep

on our system found

a bad actor monitoring

communications.

It could have had us

under surveillance for months,

but there was no contact,

there were no demands,

so it's nothing like

the attack on CAB.

- The Brannigan-Menick files

were targeted at our end.

You need to check and see

if you can access

the Melnick case files

on your system.

- I got to go.

- Where are you going?

- To pay Bibi Melnick

a visit.

- Is that wise?

- We need answers.

She's the obvious

place to start.

- OK.

I'm going with you.

What can you tell me

about the Melnick case?

- You've read the file.

- There's not much

in the hard copy.

I'd like to hear

your perspective on it, Sean.

- DS Wallace.

- You were right.

The Brannigan-Melnick files

are corrupted.

- So, can you tell me

what the hell is going on?

- I don't know,

but I'm going to find out.

- Il y a encore

des sacs plastiques?

- Ah. Dans l'auto.

- This seems out

of the way for Melnick.

Pretty isolated.

Not what you expected?

- No.

- And on her own out here.

- Wait here.

If the two of us land

on her doorstep,

her guard will go up.

Mrs. Melnick?

DS Wallace.

- It's Ms. Brannigan.

- Can we talk?

- What's this about?

- You had a lucky escape.

It must have been terrifying.

Any idea who might be

trying to hurt you?

- I've given a statement.

If you have any questions,

you can talk to the detective

assigned to the case.

There's nothing else?

- I'm here to tell you

that following a recent incident

we may be reopening your case.

- I'm sorry, who are you?

- DS Claire Wallace with CAB.

- You're right,

yesterday was terrifying.

This isn't the time.

- I was sorry to hear

about your father-in-law.

That can't have been easy.

- Hello.

- James.

It's me.

Can I speak to Arthur?

- Even after what

happened yesterday?

- He's resting.

He had a tough couple of days.

We all have.

So, there's nothing else?

- Please, I just want

to hear his voice.

- Maybe later when he wakes up.

- Thank you.

That means a lot.

I'm worried that whoever it was

might come after

- Bibi, why

why do you insist on bringing

trouble into our lives?

This is exactly the reason

why Arthur can't have

contact with you.

- This isn't my fault.

- You chose your path.

As long as you

stay away from us,

we will be safe.

- Please, James, just

Will you step up security?