The Treasury is investigating a possible cyberattack that may have exposed the data of 47 million citizens.

BarcelonaThe Spanish Ministry of Finance is investigating a possible cyberattack on its databases, which could have compromised the personal, banking, and tax data of approximately 47.3 million Spanish citizens. For now, the Ministry has stated that there is no indication that a hack has occurred, although its security team continues working to rule it out, according to sources within the department headed by María Jesús Montero. The cybersecurity firm Hackmanac has issued an alert via the social network X (formerly Twitter) about a possible cyberattack on the Ministry of Finance, which could have compromised the personal, banking, and tax data of approximately 47.3 million citizens.

According to Hackmanac, the threats originate from HaciendaSec, the cyber actor claiming to have attacked the Ministry of Finance. The attackers are allegedly offering to sell data from an updated database containing the personal information of 47.3 million citizens, including national identity card numbers, full names, residential addresses, telephone numbers, email addresses, bank details, and tax-related financial information. Hackmanac is an X account specializing in cyber risk alerts. According to this website, the attack occurred on January 31st and is "pending verification." The same portal has also reported a possible cyberattack on the Ministry of Science, also pending validation, by a hacker. under the pseudonym GordonFreeman.

The numbers don't add up

In fact, analysts doubt the scope of this potential cyberattack on the Spanish Tax Agency and believe that, as recently happened with the online retailer PcComponentes, a case also reported by Hackmanac, the number of affected users and the amount of exposed data may ultimately be much lower than the hackers initially claimed. In that case, the perpetrator claimed to have accessed the data of 16 million customer accounts, but the platform itself acknowledged that its customer base is much smaller and that only a few real users were affected due to the reuse of passwords on third-party services. The figure of 47.3 million Spaniards is suspicious in itself, given that the Spanish population is 49 million inhabitants, but the number of taxpayers was estimated at 30 million in 2025, making it highly unlikely that the Tax Agency has databases. If confirmed, the hack It would arrive three weeks after the cyberattack against the electricity company Endesa became known, from which the cyber aggressors had stolen the personal data of thousands of customers.