Teen who allegedly stole millions of personal data records arrested in Spain

Spanish law enforcement has arrested a 19-year-old man in northeastern Spain for allegedly stealing and selling about 64 million personal data records siphoned from nine companies, police said on Tuesday.

The suspect, detained last week in Igualada, allegedly accessed the systems of several companies to obtain large volumes of personal information — including national identity numbers (DNI), home addresses, phone numbers, email addresses and IBAN bank codes — which he then sold on hacker forums. It remains unclear how many individuals were affected.

According to the National Police, the investigation began in June after authorities detected the theft of data linked to multiple firms. Officers later identified the suspect and traced six online accounts and five pseudonyms used to advertise and sell the stolen databases.

During a search last week, officers seized several electronic devices and hardware-based cryptocurrency wallets, the National Police said. Investigators also froze a crypto wallet allegedly used to collect proceeds from the sales.

In a separate incident, Polish police said they arrested three Ukrainian men earlier this week after discovering hacking equipment in their car, including SIM cards, antennas, hard drives and a device used to detect hidden surveillance tools.

The men, who described themselves as IT specialists, were unable to explain why they possessed the equipment, police said. They face charges including fraud, computer fraud and possessing tools intended to commit cybercrime or damage IT systems deemed important to national defence.

Get more insights with the

Recorded Future

Intelligence Cloud.

Learn more.

No previous article

No new articles

Daryna Antoniuk

Daryna Antoniuk

is a reporter for Recorded Future News based in Ukraine. She writes about cybersecurity startups, cyberattacks in Eastern Europe and the state of the cyberwar between Ukraine and Russia. She previously was a tech reporter for Forbes Ukraine. Her work has also been published at Sifted, The Kyiv Independent and The Kyiv Post.

 

Total
0
Shares
Previous Post

Three PCIe Encryption Weaknesses Expose PCIe 5.0+ Systems to Faulty Data Handling

Next Post

Russia’s flagship airline hacked through little-known tech vendor, according to new report

Related Posts

Europol and Eurojust Dismantle €600 Million Crypto Fraud Network in Global Sweep

Nine people have been arrested in connection with a coordinated law enforcement operation that targeted a cryptocurrency money laundering network that defrauded victims of €600 million (~$688 million). According to a statement released by Eurojust today, the action took place between October 27 and 29 across Cyprus, Spain, and Germany, with the suspects arrested on charges of involvement in
Read More

ShadowRay 2.0 Exploits Unpatched Ray Flaw to Build Self-Spreading GPU Cryptomining Botnet

Oligo Security has warned of ongoing attacks exploiting a two-year-old security flaw in the Ray open-source artificial intelligence (AI) framework to turn infected clusters with NVIDIA GPUs into a self-replicating cryptocurrency mining botnet. The activity, codenamed ShadowRay 2.0, is an evolution of a prior wave that was observed between September 2023 and March 2024. The attack, at its core,
Read More