Teen who allegedly stole millions of personal data records arrested in Spain

Spanish law enforcement has arrested a 19-year-old man in northeastern Spain for allegedly stealing and selling about 64 million personal data records siphoned from nine companies, police said on Tuesday.

The suspect, detained last week in Igualada, allegedly accessed the systems of several companies to obtain large volumes of personal information — including national identity numbers (DNI), home addresses, phone numbers, email addresses and IBAN bank codes — which he then sold on hacker forums. It remains unclear how many individuals were affected.

According to the National Police, the investigation began in June after authorities detected the theft of data linked to multiple firms. Officers later identified the suspect and traced six online accounts and five pseudonyms used to advertise and sell the stolen databases.

During a search last week, officers seized several electronic devices and hardware-based cryptocurrency wallets, the National Police said. Investigators also froze a crypto wallet allegedly used to collect proceeds from the sales.

In a separate incident, Polish police said they arrested three Ukrainian men earlier this week after discovering hacking equipment in their car, including SIM cards, antennas, hard drives and a device used to detect hidden surveillance tools.

The men, who described themselves as IT specialists, were unable to explain why they possessed the equipment, police said. They face charges including fraud, computer fraud and possessing tools intended to commit cybercrime or damage IT systems deemed important to national defence.

Get more insights with the

Recorded Future

Intelligence Cloud.

Learn more.

No previous article

No new articles

Daryna Antoniuk

Daryna Antoniuk

is a reporter for Recorded Future News based in Ukraine. She writes about cybersecurity startups, cyberattacks in Eastern Europe and the state of the cyberwar between Ukraine and Russia. She previously was a tech reporter for Forbes Ukraine. Her work has also been published at Sifted, The Kyiv Independent and The Kyiv Post.

 

Total
0
Shares
Previous Post

Three PCIe Encryption Weaknesses Expose PCIe 5.0+ Systems to Faulty Data Handling

Next Post

Russia’s flagship airline hacked through little-known tech vendor, according to new report

Related Posts

Microsoft Legal Action Disrupts RedVDS Cybercrime Infrastructure Used for Online Fraud

Microsoft on Wednesday announced that it has taken a "coordinated legal action" in the U.S. and the U.K. to disrupt a cybercrime subscription service called RedVDS that has allegedly fueled millions in fraud losses. The effort, per the tech giant, is part of a broader law enforcement effort in collaboration with law enforcement authorities that has allowed it to confiscate the malicious
Read More

Active Directory Under Siege: Why Critical Infrastructure Needs Stronger Security

Active Directory remains the authentication backbone for over 90% of Fortune 1000 companies. AD's importance has grown as companies adopt hybrid and cloud infrastructure, but so has its complexity. Every application, user, and device traces back to AD for authentication and authorization, making it the ultimate target. For attackers, it represents the holy grail: compromise Active
Read More