DARKEYE.io
// Intel report News

N4t0x SpainData Leak: Massive Data Breach of Spanish Politicians & Police

Hacker N4t0x uses SpainData tool to leak personal data of Spanish politicians, police, and intelligence officers, exposing families and raising privacy risks.

Published Updated 1 min read
N4t0x SpainData Leak: Massive Data Breach of Spanish Politicians & Police
On this page

Massive Data Leak of Spanish Politicians and Security Forces

A threat actor going by the alias N4t0x has leaked a dataset allegedly containing personal data of Spanish politicians, law enforcement officials, intelligence officers, and their families.

The attacker claims to have used a tool called SpainData, which allegedly provides real-time access to national ID numbers (DNI/NIF), phone numbers, addresses, emails, dates of birth, and familial links across the entire Spanish population.

N4t0x

Scope of the Leak

N4t0x claims to have access to "100% of the Spanish population" and has made this information available for free. The SpainData tool allegedly allows real-time queries on virtually all Spanish citizens.

Security Risks

This leak poses serious problems:

• Compromise of intelligence agents and CNI operations

• Exposure of law enforcement to possible retaliation

• Vulnerability of politicians to blackmail or extortion

• Risk to family members who have no connection to public life

Attacker's Motivations

N4t0x justifies their actions as a protest against political corruption and lack of transparency, although this does not legitimize the illegal leak of personal data.

Implications

This incident highlights:

• Critical vulnerabilities in government systems

• Urgent need to improve national cybersecurity

• Importance of protecting sensitive data of public officials

Recommendations

For those affected:

• Monitor suspicious activity in personal accounts

• Change passwords and access credentials

• Report anomalous activities to authorities

This leak underscores the urgent need to strengthen national cybersecurity infrastructure to protect both public servants and citizens.

// HaveIBeenRansom Is your domain in a ransomware leak? Search leaked files by domain, email or company name. // Breach.House API Get this data through the API Victims, leak status and captures, as a feed for your SOC.
Share //

Spotted an error, or represent an organisation named here? Send us a correction and we will add it to the post. Read how we work in our methodology.

Darkeye Research Team

Tracking ransomware crews, breach disclosures and the tooling that matters — field notes from the Darkeye research desk.

Discussion (0)

Comments are open to signed-in members of the Darkeye community.

// Intel briefing

Ransomware and breach intel, before it trends

Two reports a week from the Darkeye research desk: one ransomware operation and one data breach. Signal only.

By subscribing you agree to the privacy policy. Unsubscribe in one click.