Teen who allegedly stole millions of personal data records arrested in Spain

Spanish law enforcement has arrested a 19-year-old man in northeastern Spain for allegedly stealing and selling about 64 million personal data records siphoned from nine companies, police said on Tuesday.

The suspect, detained last week in Igualada, allegedly accessed the systems of several companies to obtain large volumes of personal information — including national identity numbers (DNI), home addresses, phone numbers, email addresses and IBAN bank codes — which he then sold on hacker forums. It remains unclear how many individuals were affected.

According to the National Police, the investigation began in June after authorities detected the theft of data linked to multiple firms. Officers later identified the suspect and traced six online accounts and five pseudonyms used to advertise and sell the stolen databases.

During a search last week, officers seized several electronic devices and hardware-based cryptocurrency wallets, the National Police said. Investigators also froze a crypto wallet allegedly used to collect proceeds from the sales.

In a separate incident, Polish police said they arrested three Ukrainian men earlier this week after discovering hacking equipment in their car, including SIM cards, antennas, hard drives and a device used to detect hidden surveillance tools.

The men, who described themselves as IT specialists, were unable to explain why they possessed the equipment, police said. They face charges including fraud, computer fraud and possessing tools intended to commit cybercrime or damage IT systems deemed important to national defence.

Get more insights with the

Recorded Future

Intelligence Cloud.

Learn more.

No previous article

No new articles

Daryna Antoniuk

Daryna Antoniuk

is a reporter for Recorded Future News based in Ukraine. She writes about cybersecurity startups, cyberattacks in Eastern Europe and the state of the cyberwar between Ukraine and Russia. She previously was a tech reporter for Forbes Ukraine. Her work has also been published at Sifted, The Kyiv Independent and The Kyiv Post.

 

Total
0
Shares
Previous Post

Three PCIe Encryption Weaknesses Expose PCIe 5.0+ Systems to Faulty Data Handling

Next Post

Russia’s flagship airline hacked through little-known tech vendor, according to new report

Related Posts

Google Ties Suspected Russian Actor to CANFAIL Malware Attacks on Ukrainian Orgs

A previously undocumented threat actor has been attributed to attacks targeting Ukrainian organizations with malware known as CANFAIL. Google Threat Intelligence Group (GTIG) described the hacking group as possibly affiliated with Russian intelligence services. The threat actor is assessed to have targeted defense, military, government, and energy organizations within the Ukrainian regional and
Read More

Malicious PyPI Package Impersonates SymPy, Deploys XMRig Miner on Linux Hosts

A new malicious package discovered in the Python Package Index (PyPI) has been found to impersonate a popular library for symbolic mathematics to deploy malicious payloads, including a cryptocurrency miner, on Linux hosts. The package, named sympy-dev, mimics SymPy, replicating the latter's project description verbatim in an attempt to deceive unsuspecting users into thinking that they are
Read More

How to Browse the Web More Sustainably With a Green Browser

As the internet becomes an essential part of daily life, its environmental footprint continues to grow.  Data centers, constant connectivity, and resource-heavy browsing habits all contribute to energy consumption and digital waste. While individual users may not see this impact directly, the collective effect of everyday browsing is significant. Choosing a browser designed with
Read More