Overview
- Spanish National Police arrested a man in Palencia in an operation the FBI said it coordinated with its Los Angeles office, with authorities announcing the action on Monday.
- Investigators say the suspect is accused of membership in CARR and Z‑Pentest and of providing logistical help to a Ukrainian hacker, including an attempted escape route through Poland and Belarus.
- Police previously raided the suspect’s home in March 2026, seizing computers and cryptocurrency storage devices and freezing crypto wallets that allegedly held proceeds from stolen data.
- The arrested man has not been publicly named and no formal charges have been filed yet, as the Spanish probe remains active and tied to multinational efforts called Operation Riptide and Operation Red Circus.
- Security researchers and U.S. indictments link CARR and related groups to disruptive attacks on water, food‑processing and energy control systems, so breaking support and funding networks could reduce real safety risks and complicate attribution.