Teen who allegedly stole millions of personal data records arrested in Spain

Spanish law enforcement has arrested a 19-year-old man in northeastern Spain for allegedly stealing and selling about 64 million personal data records siphoned from nine companies, police said on Tuesday.

The suspect, detained last week in Igualada, allegedly accessed the systems of several companies to obtain large volumes of personal information — including national identity numbers (DNI), home addresses, phone numbers, email addresses and IBAN bank codes — which he then sold on hacker forums. It remains unclear how many individuals were affected.

According to the National Police, the investigation began in June after authorities detected the theft of data linked to multiple firms. Officers later identified the suspect and traced six online accounts and five pseudonyms used to advertise and sell the stolen databases.

During a search last week, officers seized several electronic devices and hardware-based cryptocurrency wallets, the National Police said. Investigators also froze a crypto wallet allegedly used to collect proceeds from the sales.

In a separate incident, Polish police said they arrested three Ukrainian men earlier this week after discovering hacking equipment in their car, including SIM cards, antennas, hard drives and a device used to detect hidden surveillance tools.

The men, who described themselves as IT specialists, were unable to explain why they possessed the equipment, police said. They face charges including fraud, computer fraud and possessing tools intended to commit cybercrime or damage IT systems deemed important to national defence.

Get more insights with the

Recorded Future

Intelligence Cloud.

Learn more.

No previous article

No new articles

Daryna Antoniuk

Daryna Antoniuk

is a reporter for Recorded Future News based in Ukraine. She writes about cybersecurity startups, cyberattacks in Eastern Europe and the state of the cyberwar between Ukraine and Russia. She previously was a tech reporter for Forbes Ukraine. Her work has also been published at Sifted, The Kyiv Independent and The Kyiv Post.

 

Total
0
Shares
Previous Post

Three PCIe Encryption Weaknesses Expose PCIe 5.0+ Systems to Faulty Data Handling

Next Post

Russia’s flagship airline hacked through little-known tech vendor, according to new report

Related Posts

Trust Wallet Chrome Extension Hack Drains $8.5M via Shai-Hulud Supply Chain Attack

Trust Wallet on Tuesday revealed that the second iteration of the Shai-Hulud (aka Sha1-Hulud) supply chain outbreak in November 2025 was likely responsible for the hack of its Google Chrome extension, ultimately resulting in the theft of approximately $8.5 million in assets. "Our Developer GitHub secrets were exposed in the attack, which gave the attacker access to our browser extension source
Read More

Silver Fox Targets Indian Users With Tax-Themed Emails Delivering ValleyRAT Malware

The threat actor known as Silver Fox has turned its focus to India, using income tax-themed lures in phishing campaigns to distribute a modular remote access trojan called ValleyRAT (aka Winos 4.0). "This sophisticated attack leverages a complex kill chain involving DLL hijacking and the modular Valley RAT to ensure persistence," CloudSEK researchers Prajwal Awasthi and Koushik Pal said in an
Read More