Overview
- The Civil Guard says four principal members are in custody, with the two most active suspects arrested this month in Ibiza and Móstoles after earlier arrests in May 2025 in Alcalá de Henares and Oviedo.
- Judicial actions seized the group’s X and YouTube accounts and shut down its Telegram channel.
- Authorities attribute to the group a series of DDoS attacks on websites of ministries, political parties, and public institutions, with activity surging after the October 2024 Valencia floods.
- The inquiry is coordinated with the National Cryptologic Center and specialized prosecutors, and legal proceedings are underway.
- Investigators characterize the incidents as causing brief service disruptions and reputational harm, and sources report the detainees had no prior similar records.