Civil Guard and Attorney General’s Office: Spain arrests suspected hacker for publishing personal data of police, prosecutors and cyber officials

Spanish Police Arrest Hacker Linked to Massive Government Data Leak

Spanish authorities have detained a hacker in Granada suspected of leaking sensitive personal data belonging to officials from key government institutions. The arrest, made last week, follows an investigation into the online publication of private information tied to members of the National Police, Civil Guard, Attorney General’s Office, National Security Council, and Spain’s National Cybersecurity Institute (INCIBE).

During a search of the suspect’s home, police seized computer equipment and electronic devices for forensic analysis. The leaked data, posted across multiple online platforms, is believed to pose significant risks, including harassment, threats, extortion, and targeted attacks against affected individuals and their agencies.

The investigation remains active as authorities work to determine whether additional accomplices were involved or if a broader network facilitated the data’s dissemination. Neither the suspect’s identity nor a motive has been disclosed.

This arrest follows a separate case earlier this year, in which a 19-year-old was detained for allegedly stealing and selling 64 million personal records from nine companies. Authorities have not confirmed any connection between the two incidents.

Source: https://therecord.media/spain-arrests-suspected-hacker-for-publishing-data-on-sensitive-government-workers

Polícia Civil de Minas Gerais (PCMG) cybersecurity rating report: https://www.rankiteo.com/company/policia-civil-de-minas-gerais

Office of the New York State Attorney General cybersecurity rating report: https://www.rankiteo.com/company/office-of-the-attorney-general-of-the-state-of-new-york

"id": "POLOFF1780411166",
"linkid": "policia-civil-de-minas-gerais, office-of-the-attorney-general-of-the-state-of-new-york",
"type": "Breach",
"date": "5/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Law Enforcement',
                        'location': 'Spain',
                        'name': 'National Police',
                        'type': 'Government Agency'},
                       {'industry': 'Law Enforcement',
                        'location': 'Spain',
                        'name': 'Civil Guard',
                        'type': 'Government Agency'},
                       {'industry': 'Legal',
                        'location': 'Spain',
                        'name': 'Attorney General’s Office',
                        'type': 'Government Agency'},
                       {'industry': 'National Security',
                        'location': 'Spain',
                        'name': 'National Security Council',
                        'type': 'Government Agency'},
                       {'industry': 'Cybersecurity',
                        'location': 'Spain',
                        'name': 'National Cybersecurity Institute (INCIBE)',
                        'type': 'Government Agency'}],
 'data_breach': {'data_exfiltration': 'Yes',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': 'Personal data of government '
                                             'officials'},
 'description': 'Spanish authorities have detained a hacker in Granada '
                'suspected of leaking sensitive personal data belonging to '
                'officials from key government institutions. The leaked data '
                'includes private information tied to members of the National '
                'Police, Civil Guard, Attorney General’s Office, National '
                'Security Council, and Spain’s National Cybersecurity '
                'Institute (INCIBE). The data was posted across multiple '
                'online platforms and poses risks such as harassment, threats, '
                'extortion, and targeted attacks.',
 'impact': {'brand_reputation_impact': 'Potential reputational damage to '
                                       'government institutions',
            'data_compromised': 'Sensitive personal data of government '
                                'officials',
            'identity_theft_risk': 'High'},
 'investigation_status': 'Active',
 'references': [{'source': 'News Article'}],
 'response': {'containment_measures': 'Arrest of suspect, seizure of computer '
                                      'equipment and electronic devices',
              'law_enforcement_notified': 'Yes'},
 'threat_actor': 'Individual hacker',
 'title': 'Spanish Police Arrest Hacker Linked to Massive Government Data Leak',
 'type': 'Data Leak'}