Cyberattack

Ayuso, Puente or the Lehendakari, among the victims of a leak of politicians' personal data

Two attacks expose ID numbers, phone numbers and even bank accounts of around fifty regional and transport officials

Isabel Díaz Ayuso.
ARA
23/01/2026
2 min

BarcelonaA new campaign has been launched to leak the personal data of Spanish politicians. After several cyberattacks exposed the data of Spanish Prime Minister Pedro Sánchez and members of his government a few months ago, this time the victims have been regional presidents and high-ranking officials, including Isabel Díaz Ayuso, according to reports. published by Eldiario.esThroughout Friday, a second wave of leaks has been made public, affecting the Minister of Transport, Óscar Puente, members of his team, as well as former Minister José Luis Ábalos, Santos Cerdán, and his former advisor, Koldo García. The first leak, according to the online publication, occurred on a website specializing in publishing this type of database. Besides information on the President of the Community of Madrid, the leak also includes data on the President of Andalusia, Juan Manuel Moreno Bonilla; the President of Aragon, Jorge Azcón; the President of Castile and León, Alfonso Fernández Mañueco; the President of the Valencian Community, Juan Francisco Pérez Lorca; the acting President of Extremadura, María Guardiola; the President of Navarre, María Chivite; and the Lehendakari (President of the Basque Government), Imanol Pradales. The leak affects a total of 47 people, and the published information varies depending on the individual. In Ayuso's case, for example, only her personal email address is revealed. But in Pradales' case, data is even included for a person the cyberattacker has identified as her partner. As for other regional presidents and councilors, including some from Catalonia, there is an abundance of national identity card and telephone numbers, as well as home addresses, car details and license plate numbers, and bank account numbers, according to the published information.

Messages from the authors

The author of the first post, who identifies as Eurogosth, has left no clues as to their motivations. "I know some autonomous communities are missing, they won't be spared. Soon I'll make version 2 of this database, probably with family members, or without, I don't know, I'm not confirming anything. Long live Spain," they say in their only message.

The second leak comes as retaliation for the handling of the Adamuz accident, according to its author, who in this case uses the alias Vindex. In addition to the leaks involving Puente, Ábalos, Cerdán, and Koldo, they have made public the data of high-ranking officials from Renfe and Adif, as well as the president of a company that participated in the renovation of an infrastructure project in Adamuz. They have released their national identity card numbers, phone numbers, addresses, and dates of birth, according to Eldiario.es. The responsible user says their motivation is for "Spain to be great again" and to "get rid" of the political class.

stats