Spain
Primarily a target
—
292 received·
8 initiated·
53 responses
·EU · NATO
Across the full record, 293 cyber operations involving Spain were added to the database. The all-time mean Intensity of cyber operations involving Spain is 2.8.
Maintained by EuRepoC research analysts · updated 16 Oct 2026
For all time, this country appears chiefly as a target — 292 incidents directed at it, 8 it is linked to initiating.
Source: EuRepoC Global Database as of 16 Oct 2026.
01 / 02
8 incidents · as actorCyber activity
Operations EuRepoC links to Spain state-aligned actors, and the international responses they drew.
Cyber incident intensity
Mean3.2/15Moderate
Range 2.0–5.0
Drag the ends of the observed range to narrow intensities.
8 coded incidents · All time
Database additions by yearincidents linked to Spain
Bar height shows incidents added during all time; select a bar to filter this interval; hover for average intensity.
Most-targeted sectorswhat its operations hit
SectorIncidentsIntensityResponded
Government / ministries
3.3Moderate
2/3
Legislative
3.5Moderate
1/2
Political parties
3.5Moderate
1/2
Civil service / administration
3.0Moderate
2/2
International / supranational organization
3.0Moderate
2/2
Energy
5.0Elevated
0/1
Judiciary
3.0Moderate
1/1
Advocacy / activists (e.g. human rights organizations)
3.0Moderate
1/1
Its operations concentrate on Government / ministries — 3 of 8 incidents.
By targetwho its operations hit
02 / 02
Operations initiated & responses drawn
(Spain)
Spain
·Energy
Unknown Threat Actors Breached Spanish Energy Provider Endesa On 29 December 2025
29 Dec 2025
Incident · Moderate severity
29 Dec 2025
(Spain)
Spain
·Energy
Unknown Threat Actors Breached Spanish Energy Provider Endesa On 29 December 2025
(Spain)
Spain
·Civil service / administration
A Student Hacked The Platform Educacyl Of The Education Council Of Castile And León In Spain On 31 May 2025
31 May 2025
Incident · Low severity
31 May 2025
(Spain)
Spain
·Civil service / administration
A Student Hacked The Platform Educacyl Of The Education Council Of Castile And León In Spain On 31 May 2025
ESCivil Guard
dangerous hacker
Spanish National Police Arrested Hacker Accused of Attacks on NATO and Government Institutions in Spain and the US, 5 February 2025
Criminal proceedings
1 Feb 2025
Criminal proceedings
1 Feb 2025
ESCivil Guard
dangerous hacker
Spanish National Police Arrested Hacker Accused of Attacks on NATO and Government Institutions in Spain and the US, 5 February 2025
Natohub
Canada
·International / supranational organization
Natohub Breached Systems of UN Agency ICAO and Leaked Personal Data Of 24,529 United Nations Delegates in Three Databases on 23 December 2024
23 Dec 2024
Incident · Low severity
23 Dec 2024
Natohub
Canada
·International / supranational organization
Natohub Breached Systems of UN Agency ICAO and Leaked Personal Data Of 24,529 United Nations Delegates in Three Databases on 23 December 2024
Jose Luis Huertas
Spain
·Government / ministries +1
The 19-year-old hacker Jose Luis Huertas gained access into the Judicial Neutral Point and used it to target other Spanish public institutions since at least November 2022
1 Nov 2022
Incident · Low severity
1 Nov 2022
Jose Luis Huertas
Spain
·Government / ministries +1
The 19-year-old hacker Jose Luis Huertas gained access into the Judicial Neutral Point and used it to target other Spanish public institutions since at least November 2022
(Spain)
Spain
·Civil service / administration
Unauthorized actor gained access to computer networks of multiple Spanish public institutions and stole data related to 40 million licence plates beginning in 2020
1 Jan 2020
Incident · Low severity
1 Jan 2020
(Spain)
Spain
·Civil service / administration
Unauthorized actor gained access to computer networks of multiple Spanish public institutions and stole data related to 40 million licence plates beginning in 2020
Anonymous
Spain
·Finance +1
Anonymous Catalonia takes down the website of the Bank of Spain
26 Aug 2018
Incident · Low severity
26 Aug 2018
Anonymous
Spain
·Finance +1
Anonymous Catalonia takes down the website of the Bank of Spain
Centro Nacional de Inteligencia (CNI)
ESCH2 countries
·Legislative +7
The Spanish government is suspected to have conducted an extensive cyber-espionage operation against the Catalan independence movement using Pegasus spyware beginning in 2017
1 Jan 2017
Incident · Low severity
1 Jan 2017
Centro Nacional de Inteligencia (CNI)
ESCH2 countries
·Legislative +7
The Spanish government is suspected to have conducted an extensive cyber-espionage operation against the Catalan independence movement using Pegasus spyware beginning in 2017
Showing the 8 most recent of 9
Open all in advanced search