The arrest occurred on June 15th as part of Operation Borraska, an investigation coordinated by the Instruction Section of the Central Court of Instruction number 3 and the Prosecutor's Office of the Audiencia Nacional. Investigations are ongoing to clarify all facts and the extent of the illicit activities.
Cyber threat specialists identified the detainee as an authorized user of a restricted access tool, used to obtain personal information of numerous citizens in real-time.
“"Thanks to this tool, real-time queries could be made on restricted databases, obtaining personal information of numerous citizens."
To date, five arrests have been made in connection with this operation. Among them is the arrest in May 2025 of the main suspect, known as Alcasec, a Spanish hacker with prior convictions for cyberattacks on strategic companies and the exfiltration of sensitive data.
Alcasec faces charges including money laundering, discovery and revelation of secrets, and membership in a criminal organization.
