Overview
- National Police arrested an individual in Granada and raided their home in an operation that culminated on May 27, seizing computers and electronic devices for forensic analysis.
- Published records targeted staff across several key state bodies including the national cybersecurity institute (INCIBE), the State Attorney's Office, the National Security Council, the National Police, the Civil Guard, the Ministry of Finance, and the tax agency.
- Police say the leak posed an immediate risk to the safety and integrity of affected people and institutions and that investigators are examining seized equipment for evidence of additional participants.
- INCIBE and reporting indicate the disclosed files may have been assembled from older breach dumps, credential leaks, and open-source research rather than from a direct breach of institutional systems.
- The probe is being led under Madrid Investigative Court No. 22 and could produce further arrests as authorities confirm provenance of the data and assess threats to exposed officials.