In a dramatic takedown that stunned investigators, Spanish authorities have arrested a 19-year-old hacker in Igualada, Barcelona, accusing him of orchestrating one of the largest data theft operations uncovered this year.
The suspect, arrested in Igualada, Barcelona, is accused of allegedly infiltrating the systems of nine different companies, and quietly extracting a massive database of 64 million personal records — then attempting to sell them on underground hacker forums to the highest bidder.
According to the National Police, the teen is accused of accessing corporate systems, obtaining huge troves of sensitive information, such as names, home addresses, phone numbers, national identity card (DNI) numbers, email addresses, and even IBAN bank account codes.
Authorities say he later advertised the stolen data on hacker forums, using six separate accounts and five different pseudonyms to hide his identity and market the data across cybercrime marketplaces.
The investigation began in June 2025, when police authorities noticed a pattern of data breaches across nine organizations. Digital forensics eventually pointed to a single individual in the Catalan town of Igualada. When agents searched the property last week, they seized computers, storage devices, and several hardware cryptocurrency wallets. One cryptocurrency wallet believed to contain profits from selling the stolen information has been frozen.
Investigators are still working to determine how many individuals were affected, noting that the total number could span millions across multiple countries. They warn that the stolen information — much of it highly sensitive — could be used for identity theft, financial scams, and further criminal activity on dark-web marketplaces.
The teen now faces multiple charges, including unauthorized access to computer systems, distribution of private data, and violations of privacy laws.
