I had set up the Amazon of the stolen data

José Luis Huertas, aka AlcasecIt wasn’t just a hacker. At 21 he had built “UDYAT – The Eye of Horus“, a commercial platform that sold stolen data with sophistication not so far from that of Amazon or Netflix.

Why is it important. The Alcasec detention He has brought to light that Spain had a “parallel data market where anyone could buy segmented personal information as if it were a subscription service to use. His business model was indistinguishable from a legitimate startup.

The context. Although media is presented as a youth hacker from Your detention in 2023the reality is more complex. Alcasec had created a complete business infrastructure:

• Cloud storage.
• Customer service bot on social networks.
• Data segmentation by profiles.
• And even a cryptocurrency billing system.

The facts. The platform offered “custom consultation services” through an encrypted bot. Customers could buy individualized data packages according to specific individuals or legal entities. Like any modern electronic commerce, but selling your ID, your phone number and your bank data.

His “catalog” included:

• Complete telephone listings.
• Operator customers.
• Madrid transport fertilizers.
• Pet records.
• Databases of educational centers.
• Civil Registry Information.

In figures. Alcasec invoiced 1,866,175 euros through its platform. In their devices, 32,943 bitcoins were found. Between December 2021 and February 2022 he received cryptocurrency notifications worth 365,000 euros.

Between the lines. The participation of former State Secretary Francisco Martínez was not accidental. The network He used his figure to appear to be a legitimate security consultancy, thus bleaching its criminal operation through corporate structures.

Police Define the organization as “a structural threat with the capacity for economic and strategic destabilization.” They do not exaggerate. They had made public institutions violated without realizing it, turning their databases into an online supermarket.

Deepen. The most worrying is the scalability of the model. Alcasec didn’t need to hack every time I wanted money. He had automated the process: the systems continually stole data, the platform automatically classified them and the BO served 24/7 customers. A business that worked alone.

The difference between Alcasec and a normal technological company is that one sells legal services and the other illegal data. Specifically, your private life.

Outstanding image | National Police

In Xataka | After the mysterious Hackers Careto group was an unexpected agent: the Government of Spain, according to Techcrunch