Major Data Breach in Spain: Two Minors Arrested for Personal Data Leak
In a shocking turn of events, the National Police of Spain have arrested two minors for their alleged roles in a significant data breach that has exposed sensitive personal information, including that of President Pedro Sánchez , as well as several government ministers and members of the CNI (National Intelligence Center). The arrests, confirmed by multiple media outlets, including La Vanguardia and El País, were executed as part of an ongoing investigation into the leak.
The arrests took place on September 26, 2025 , at two separate locations: Catalonia and Castilla-La Mancha . As pointed out by La Vanguardia, this operation is part of a broader investigation aimed at uncovering the origins and implications of the leak, which has compromised the security and privacy of many high-profile government figures. Authorities have been focusing on reconstructing the data trail and determining how the information became public.
Key Details of the Arrests
The General Information Commissariat of the National Police led the operation, although the specifics remain largely undisclosed. It appears that law enforcement took caution to keep the details of the investigation under wraps until they successfully identified and apprehended the suspects. Their strategic planning evidently paid off, as the arrests occurred simultaneously across two different jurisdictions.
Identities and Responsibilities of the Arrested Minors
According to reports, the arrested individuals are both minors. One is identified as the main actor in the data leak, while the other is believed to have had a lesser role. Investigators are currently piecing together the nature of their involvement and working to uncover how they gained access to such sensitive data , which ultimately made its way to the internet.
<span>Screenshot of the message posted by N4t0x claiming responsibility for the leak.</span>The Leak: Who is N4t0x?
The investigation narrows in on a message disseminated by an individual known as N4t0x , who claimed responsibility for the data breach on a cybercrime forum. In this message, N4t0x boasted that he and a group of accomplices conducted a “mega leak” involving personal data from “the vast majority of Spanish politicians.” They allegedly utilized a tool named SpainData , which they claimed allowed them to access and publish data regarding the entire population.
Authenticity and Scope of the Claims
While the N4t0x group asserted that they had acquired information concerning the entire Spanish populace, no official verification of this claim has been made at this time. Authorities have merely confirmed the existence of the investigations and the arrests, withholding specifics about the nature or extent of the leaked information. Moreover, there are doubts surrounding the functionality of the SpainData tool as described by the perpetrator.
Ongoing Investigation Under Secrecy
On September 22, 2025 , RTVE.es reported that the National Court had launched a secret investigation related to this new leak of personal data linked to N4t0x, affecting not just President Sánchez but several ministers and CNI members. Presiding Judge Antonio Piña initiated the proceedings and mandated confidentiality to protect the integrity of the investigation. Just days later, on September 28 , Europa Press highlighted that Spain’s intelligence services and judicial authorities intensified their search efforts, targeting individuals connected to the case, including N4t0x.
This data leak emphasizes the increasing vulnerabilities in cyber-security and the potential risks posed by social engineering tactics. With ongoing investigations, the authorities are leaving no stone unturned to ensure that both the methods used by the offenders and the implications of the breach are thoroughly understood and addressed.