Find notable cyber news and cases, enriched with sources, timelines, and signals.

Mass leak of personal data from Spanish state entities

Data Leak
First reported
Last updated
Happening score
H score 24
1 unique sources, 1 articles

Summary

Hide ▲

Spanish state entities are facing a mass leak of personal data that exposed employees and members of critical institutions and created national security risk. The records were tied to INCIBE, the State Attorney General's Office, the National Police, the Civil Guard, and the National Security Council. Published material included DNI numbers, mobile numbers, and professional email addresses, and authorities traced the activity to an operation circulating since February 2026.

Related Happenings

Spanish National Police arrest in INCIBE leak case

Law Enforcement
First: 02.06.2026 00:28 Last: 02.06.2026 00:28 Sources 1

How related: The Spanish National Police has arrested an individual for leaking sensitive information related to members of various key state organizations, including the National Cybersecurity Institute (INCIBE).

About this happening: The **Spanish National Police** arrested a suspect in a **doxxing/data-leak** case that exposed personal data tied to **INCIBE** and other key state organizations. The probe, over...

Timeline

  1. 02.06.2026 00:28 2 articles · 1h ago

    Spanish National Police arrest suspect over mass leak tied to INCIBE and state entities

    Legal Policy Action Update

    On May 27, the Spanish National Police arrested a suspect and searched his home after identifying him as responsible for a massive leak of personal data tied to INCIBE and other critical state entities. Officers seized computers and other electronic devices for forensic analysis while investigators looked for evidence of additional participants.

    Show sources
  2. 02.06.2026 00:28 1 articles · 1h ago

    Authorities disclose mass doxing operation exposing Spanish state employees

    Initial Disclosure

    Spanish authorities described a mass doxing operation that spread personal data from the State Attorney General's Office, INCIBE, the National Police, the Civil Guard, and the National Security Council. INCIBE said in February that there was no direct compromise of its systems and that the material appeared to come from targeted collection and publication of data gathered from sources such as older breaches, credential dumps, and OSINT tools.

    Show sources