Spanish National Police have arrested a person accused of leaking sensitive personal information linked to members of several major state organizations, including Spain’s National Cybersecurity Institute, known as INCIBE.
Authorities said the suspect was responsible for a large-scale personal data leak that created national security concerns because of the nature of the people and institutions exposed. The leaked information reportedly involved individuals connected to the State Attorney General’s Office, INCIBE, the National Police, the Civil Guard, and the National Security Council, all of which are considered important state entities in Spain.
After identifying and locating the person believed to be behind the leak, police searched the suspect’s home and seized computers and other electronic devices. Investigators will now examine those devices for possible forensic evidence and to determine whether more people were involved.
Spain’s National Police said the investigation was supervised by Madrid Investigative Court No. 22 and began after authorities detected the widespread publication of the data. Officials said the leak created an immediate risk to the security and integrity of both the affected individuals and the institutions involved.
Because of the seriousness of the case, police launched an urgent operation to find and arrest the person responsible. The operation ended on Wednesday, May 27, with the suspect’s arrest and the search of their residence.
The police statement did not say whether the arrested person was also responsible for breaching any official systems. However, INCIBE had said in February that the incident appeared to be part of a doxing campaign rather than a direct compromise of its systems.
At the time, INCIBE said the exposed information appeared to come from the targeted collection and publication of data affecting important organizations and their employees. Possible sources could include older data breaches, credential leaks, and publicly available information gathered through OSINT tools.
Some of the leaked records reportedly included outdated information, including the names of people who had left INCIBE years earlier.
The group linked to the leak was reportedly known as “Police-ESP-Doxed” and had published the data on a version of BreachForums that was active at the time.
In March, personal information belonging to hundreds of Spanish judges and prosecutors was also published on Doxbin. That data reportedly included full names, DNI numbers, personal mobile phone numbers, and professional email addresses.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
Police are now analyzing the seized devices to look for signs of other people involved in the operation, meaning more arrests could follow.
