**Spanish Police Arrest 19-Year-Old Hacker Linked to 64 Million Stolen Records**
Spanish authorities have detained a 19-year-old in Barcelona on charges of stealing and attempting to sell 64 million personal records obtained from breaches at nine unnamed companies. The suspect, arrested last week in Igualada, faces allegations of cybercrime, unauthorized data access, and privacy violations.
According to the National Police, the investigation began in June after breaches at the affected firms came to light. The stolen data includes full names, home addresses, email addresses, phone numbers, Spanish national ID (DNI) numbers, and IBAN bank codes. The hacker reportedly used six accounts and five pseudonyms to sell the information on hacker forums.
During the arrest, police seized computers and cryptocurrency wallets believed to contain proceeds from the data sales. The total number of individuals impacted remains unclear.
Unrelated Arrest in Ukraine Targets Data Broker with Custom Malware
In a separate operation, Ukrainian cyberpolice arrested a 22-year-old for developing and deploying malware to hijack social media and other online accounts. The suspect, who primarily targeted victims in the U.S. and Europe, sold access to compromised accounts on hacking forums, using a bot farm of 5,000 accounts to amplify his operations.
The individual faces up to 15 years in prison under Ukraine’s Criminal Code (Article 361) for unauthorized access to computer systems, along with a potential three-year ban on certain professional activities.
Xoserve cybersecurity rating report: https://www.rankiteo.com/company/xoserve
"id": "XOS1765307603",
"linkid": "xoserve",
"type": "Breach",
"date": "12/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Unknown',
'location': 'Spain',
'type': 'Company'}],
'data_breach': {'data_exfiltration': 'Yes',
'number_of_records_exposed': '64,000,000',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Full names',
'Home addresses',
'Email addresses',
'Phone numbers',
'DNI numbers',
'IBAN codes']},
'date_detected': '2023-06',
'description': 'The National Police in Spain have arrested a suspected '
'19-year-old hacker in Barcelona for allegedly stealing and '
'attempting to sell 64 million records obtained from breaches '
'at nine companies. The teen faces charges related to '
'cybercrime, unauthorized access, and privacy violations.',
'impact': {'data_compromised': '64,000,000 records',
'identity_theft_risk': 'High',
'payment_information_risk': 'High'},
'initial_access_broker': {'data_sold_on_dark_web': 'Yes'},
'investigation_status': 'Suspect arrested',
'motivation': 'Financial gain',
'references': [{'source': 'National Police of Spain'}],
'regulatory_compliance': {'legal_actions': 'Charges related to cybercrime, '
'unauthorized access, and '
'disclosure of private data',
'regulations_violated': ['Privacy violations']},
'response': {'containment_measures': 'Arrest of suspect, confiscation of '
'computers and cryptocurrency wallets',
'law_enforcement_notified': 'Yes'},
'threat_actor': '19-year-old individual',
'title': 'Spanish Teen Hacker Arrested for Stealing and Selling 64 Million '
'Records',
'type': 'Data Breach'}