This is what we know about the alleged ‘hacking’ of the Treasury

From names and ID numbers to names and bank account codes of more than 47 million taxpayers in Spain. That is, at least, the information that a cybercriminal claims to have obtained from the Ministry of Finance, and that he would be offering in at least one of the many forums dedicated to trading stolen data. The question is inevitable: are we facing a real leak? And, whatever happens, what should be done in a scenario like this? Let’s go in parts. The alleged leak. As Hackmanac points outon January 31, a publication appeared in a forum frequented by cybercriminals in which a user called ‘HaciendaSec’ stated the following: “Today I am selling the updated Treasury database that contains the information of 47.3 million citizens.” In that same message, he detailed that the file supposedly included information associated with taxpayers such as: ID DNI/NIF Full name Address (type of street, address, address details, postal code, province, municipality, town) Telephone (country code, telephone) IBAN Email Last collected Total collection Capture of the forum with part of the information hidden for security The usual goal: make money. It’s no secret: the main driver of cybercrime is usually money. And this case fits perfectly into that pattern. ‘HaciendaSec’ is offering these supposed data in exchange for financial compensation. We do not know the price of the database, but we do know the terrain in which these actors usually operate: payments in cryptocurrencies, a channel that allows them to receive illicit funds reducing, at least in theory, the possibilities of being tracked and identified. The big question: has Treasury data been leaked? Here comes the key point. If we stick to the story of ‘HaciendaSec’ itself, it would be “an updated database.” The problem is obvious: to what extent is the word of a criminal reliable? The user includes a supposed “sample” of the data, but this type of evidence says little on its own and does not confirm the real scope of the incident, or even if it exists as such. In these types of cases it is advisable to maintain skepticism: sometimes these are recent and legitimate leaks, but other times we are dealing with compilations of other breaches, data that has already been circulating for a long time, or outright hoaxes designed to sell smoke (and make money). What the Treasury says. From Xataka we have contacted the Treasury to request comments on this matter. The official response, for now, is that they have no indication that their systems have been compromised. Of course: they also tell us that those responsible for security are working to rule out any type of intrusion. So, for now, we have to wait for more clarity about what happened. But in the meantime, it is advisable not to sit idly by. What to do about the alleged ‘hacking’ of the Treasury. As things stand, we have two different levels: what the author of the publication claims and what the Treasury maintains, which maintains an internal investigation without conclusive signs of compromise. In such a scenario, the most sensible thing is to act prudently and take preventive measures. In short: be attentive, distrust by default and verify before accepting anything as good. Anti-spoofing tools. We should be attentive to the campaigns phishing and impersonation, which is where many people end up falling. The Tax Agency remembers that it never requests confidential, economic or personal information, account numbers or card numbers from taxpayers by email, SMS or Bizum, nor does it attach annexes with invoice information or other types of data. Additionally, he recommends: Do not open messages from unknown or unsolicited users, delete them directly. Do not respond under any circumstances to these messages. Be careful when following links in emails even if they are from known contacts. Be careful when downloading email attachments, even from known contacts. Images | Treasury | freepik In Xataka | How often should we change ALL our passwords according to three cybersecurity experts

The alleged PcComponentes hack affects 16 million customers. It’s another nightmare for phishing attacks

In Hackmanac Cybersecurity alerts reporting alleged hacks and massive data thefts around the world are frequent. One of the last notices, posted yesterdayaffects a Spanish company on the rise: PcComponentes. If confirmed, the alleged data theft would have affected a huge number of users. 16 million affected. According to these data, a cyber attacker using the alias ‘daghetiaw’ claimed to have managed to infiltrate PcComponentes. By doing so, it has obtained the data of 16.3 million customers, specifically: DNI/NIF Orders and invoices Address Contact details (phone) Credit card metadata (type, expiration date) IP address A sample that seems to confirm the hack. The author of the cyberattack wanted to demonstrate that the database he managed to obtain is legitimate, and to do so he has published a free extract of 500,000 users. That is already a very bad sign and seems to confirm that this hack and massive data theft has indeed been successful. There were already problems a year ago. An This failure exposed a database with access credentials. And everything fits. In The Computer Chapuzas They have contacted 0xBogart and obtained more information about that incident. This user actually talks about the fact that a database from August 2023 was already stolen and that then “it had 11,951,125 users, it makes sense that in 2026 they will have 16 million.” This expert had access to PcComponentes’ servers for five years, and only lost it “when they abandoned their data center for Amazon Web Services,” he indicates in the El Chapuzas Informático text. Pc Componentes has not confirmed the hack. At the moment those responsible for Pc Componentes have neither confirmed nor denied the massive data theft. At Xataka we are trying to contact the company to clarify the details. Meanwhile, those responsible have 72 hours from when the hack was discovered to notify the Spanish Data Protection Agency (AEPD). Up next: phishing attacks. This new massive data theft represents a potential nightmare for PcComponentes customers. If the hack is confirmed, all that data could be used for much more convincing phishing attacks: the more information cyber attackers have about us, the more they can “convince” us with messages that appear to be authentic and that manage to confuse us. Or phishing. There is also the danger of identity theft: the stolen data allows the creation of a “user profile” with which a cybercriminal can impersonate one person to deceive another with social engineering techniques. If the database has been leaked there is little that PcComponentes clients can do because their information will already be exposed. It has not been clear if there are passwords included for access to the company website in the massive data theft, but our recommendation is to change that access password as soon as possible. In Xataka | The leak of 16 billion passwords would be the largest in history. If it weren’t for the fact that it’s a gigantic rehash

Iniesta promised them happy retirement. Now they are investigating him in Peru for an alleged $600,000 scam

Andres Iniesta it’s news. And it is for something that has little to do with football, sports or entertainment. On this occasion the headlines are monopolized in the pages of the judicial chronicle on account of a controversy that arose in Peruwhere the Prosecutor’s Office is investigating the former midfielder for his role in an alleged chain of scams against businessmen in the country for a sum of around $600,000. Iniesta’s surroundings already has denied the accusations and talks about “malicious” information to take advantage of his image. It is not the first time that the former soccer player has been in the spotlight for his role as a businessman: years ago he did it for his wineries, both for a dispute with the Treasury as for your losses. What has happened? That the Peruvian Prosecutor’s Office is investigating Iniesta for an alleged “aggravated fraud.” The news has been reported by the country’s media, such as The Republic, Trome either Libero and it has been echoed in Spain by Efe agency, The Country either The Sixthwho has even spoken with one of those affected. Basically, the Public Ministry has opened a tax file on the former soccer player following a complaint related to the company NSN Barcelona, ​​linked to Iniesta. In the Prosecutor’s document (reproduced partially by The Republic) it can be read that the complaint is filed against Iniesta and at least two other people for “the alleged commission of crimes against property in the form of aggravated fraud.” The document also details that the “prestige” of the former Barça player played a key role in raising funds and committing the alleged scam. What is investigated? The facts reported by Gucho Entertainment and other Peruvian businessmen who claim to have invested around $600,000 in a series of events (sports and artistic) that supposedly had the support of NSN Sudamérica, a subsidiary of the company linked to Iniesta. His name would have made it easier for the Peruvian businessmen who have now gone to court to hand over thousands of dollars to organize a series of shows. Specifically, four are mentioned: the Upa Upa Fest, a friendly between the club Scientist of Cusco and the National of Ecuadora K-pop festival and another legends match between Peru and Spain. Of all of them, only one was held, the Upa Upa Fest, and it did not turn out as investors expected. In fact, it left considerable losses. And what happened? The problem is that the firm that was supposed to be in charge of the executive production of the events, NSN Sudamérica, declared bankruptcy in June 2024. The subsidiary entered into the liquidation process and allegedly did not return the money invested by the Peruvian businessmen to finance the rest of the shows. “No notification. We found out that the company was in liquidation. They never took responsibility for anything, although they were supposed to do so” reported on Monday Emilio Lozano, one of the supposedly affected businessmen, in an interview with ‘And now Sonsoles’, a La Sexta program. What does that have to do with Iniesta? That NSN South America is a delegation of NSN Barcelona. The former La Roja footballer himself celebrated the launch in 2023, according to statements collected by The Country: “We are very excited to be present in a country like Peru and a continent like South America to continue growing and promoting our values ​​around the world.” The subsidiary was established at the beginning of that year by a group of Peruvian and Spanish businessmen, the starting signal for attracting investors. The Prosecutor’s Office document not only cites the former soccer player, but it does underline that his name was essential for raising funds. How key was it? The writing is very clear. “The facts that will be detailed below involve Andrés Iniesta, who is a figure of international recognition for his achievements in professional football as a former player of the Club Barcelona of Spain and having been a former world champion with the Spanish team, who using this prestige authorized and supported the foundation of NSN Sudamérica to act as a subsidiary of his company NSN Barcelona throughout South America. However, that prestige was only used to raise capital from Peruvian businessmen under the deception that they were going to be invested in large events that were approved in coordination between NSN Barcelona and NSN South America,” reads the writing of the Prosecutor’s Office cited by The Republic. At the moment the agency has initiated preliminary proceedings for an alleged crime against property, a phase that will last several weeks. What does the company say? Mark distances. Through a blunt statement Iniesta and NSN make several points clear. To begin with, they “outrightly” deny the accusations that have been published in recent days. Second, they claim that the information has been published “maliciously” with the purpose of taking advantage of the image of “a public figure” like Iniesta. “We trust that the Peruvian justice system will clarify this situation very soon and we reserve the right to file appropriate actions in defense of our work and honor, requesting maximum rigor in the information published regarding this case,” concludes the official statement. From the ex-footballer’s entourage they have something beyond and they have explained to La Sexta that the former soccer player and NSN are also affected: they created a subsidiary in Peru “led by people who were not the right ones and harmed them and third parties.” “Those in charge made a mistake when it came to putting the right people in place,” abound. Images | Wikipedia and Carlos Fernández (Unsplash) In Xataka | If the question is how to add more epic to LaLiga, in Russia it is very clear: with AI, many muscles and topics

The Police have arrested two minors as alleged perpetrators of a leak. Data from Pedro Sánchez and ministers were included

Two minors have been arrested by the National Police for their alleged involvement in a massive leak of personal data that included information from President Pedro Sánchez, ministers such as Margarita Robles and José Manuel Albares and members of the CNI. Police sources confirmed the arrests The Vanguard and The Countryin an operation linked to the publication of that data on the Internet. The arrests were carried out on September 26 in two different points: Catalonia and Castilla-La Mancha, as detailed by La Vanguardia. Both are part of the open investigation to clarify the origin and scope of the leak, which affected Government and CNI authorities. The investigations focused on reconstructing the path of the data and determining how its dissemination occurred. How the arrests were made. The General Information Commissariat of the National Police was in charge of the arrests. The details of the operation are not known, but it was probably kept under wraps until the agents managed to identify the suspects and arrest them in Catalonia and Castilla-La Mancha. Minors and degree of involvement. Those arrested are two minors, according to the aforementioned media. One of them appears as the main person involved in the leak, while the other would have had less responsibility. Researchers are now working to define the participation of both and clarify how they accessed the data that ended up published on the Internet. Screenshot of the message posted by N4t0x The message and the tool. The investigation focuses on a message spread by the user who called himself N4t0x, who claimed responsibility for the leak on a cybercrime forum. In it he claimed to have achieved, together with other people, “a mega leak of personal data of the vast majority of Spanish politicians” using a tool called SpainData. In the publication, the group detailed that this tool allowed information on the entire population to be consulted and announced that the leak would be “free and public.” Scope and verification. Although the N4t0x group claimed to have obtained information from the entire Spanish population, these claims have not been officially verified. The police sources cited by the media have limited themselves to confirming the investigation and the arrests, without specifying the content or magnitude of the files. Nor has it been proven that the SpainData tool works as the author described in his message. Investigation under secret. On September 22, 2025, RTVE.es reported that the National Court was secretly investigating a new leak of personal data attributed to N4t0x, which affected President Pedro Sánchez, several ministers and members of the CNI. Judge Antonio Piña, of central court number 6, assumed the first proceedings and decreed the secrecy of the proceedings. Days later, on September 28, Europa Press pointed out that The Information Services and the Spanish justice system had intensified the search for alleged actors involved such as N4t0x. Images | National Police (1, 2) | Screenshot In Xataka | If your home is robbed and you have the recording, this security camera company will pay you for it

NASA ignores Harvard’s study on an alleged extraterrestrial ship: “It is an interstellar kite”

On July 1, 2025 he will go down in history as the day that astronomers confirmed the presence of an interstellar third object In the Solar System. 3i/Atlas is, according to NASA, a kite from another star. But for Harvard Avi Loeb teacher, it could be something much more disturbing: a piece of extraterrestrial technology, possibly hostile. Wait, what? In a series of articles and a Paper scientist Not yet reviewed by pairs, Avi Loeb and its collaborators pose a hypothesis that touches science fiction. Known for his controversial position on ‘oumuamua, The first interstellar object ever discoveredwhich also described as possible alien technology, Loeb bases his new theory on a series of characteristics that he considers “anomalous” on the path and nature of 3i/Atlas. The anomalies of 3i/Atlas. Loeb Point out in your blog that the retrograde path of 3i/Atlas is inclined only about five degrees with respect to the plane in which the earth orbit. The director of the Harvard Astronomy Department estimates that the probability that this occurs by chance is only 0.2%. His career about Venus, Mars and Jupiter unusually. An orbit like this, it argues, would be ideal for a probe that would like to observe the planets of the interior solar system. On the other hand, Loeb highlights its huge size, initially estimated at 20 kilometers in diameter. According to his article, we should have seen a million objects of the size of ‘oumuamua (about 100 meters) for each object of the 3I/Atlas caliber. To top it off, the new interstellar visitor will reach its closest point to the sun (its perihelium) on October 29, 2025, at which time it will have been hidden from our view by the sun itself. The dark forest hypothesis. Loeb suggests that becoming invisible from our point of view is intentionally, since the perihelium is the optimal point to perform an inverse Oberth maneuver: a high efficiency braking to be gravitationally trapped by the solar system without being detected from the earth. To round his hypothesis, Loeb is part of this idea in the dark forest hypothesis, popularized by the author of “The problem of the three bodies”, Cixin Liu. The hypothesis, One of the explanations of the Fermi paradoxsuggests that advanced civilizations remain silent to avoid being detected by other potentially predatory civilizations. In this scenario, 3i/Atlas would be a recognition probe exploring the solar system. NASA does not believe it is an alien ship. Although Loeb’s arguments are intriguing, they face Ockham’s Navaja, who says that the simplest explanation is usually correct. In this case, the simplest explanation is that 3i/Atlas is a kite, As NASA says. And the astronomical community has more and more evidence to support this conclusion, refuting, point by point, alleged anomalies. Telescope images such as North Gemini or the Vera C. Rubin Observatory They show what a coma looks like, A diffuse gas and dust cloud surrounding the kite ice cream When heated by the sun. This should invalidate the argument of the size of 20 km, since the real core is much smaller. Loeb himself He later recognized That the elongated appearance is due to the movement of the object during the photographic exposure, not to its shape. Disassembling the Avi Loeb hypothesis. Loeb said that no specific gases were detected. However, as explained by astronomer Darryl Seligman, the object was still far from the sun when those statements were made. It is normal for comime activity (basically, sublimation of ice) is weak to those distances. It is expected that as he approaches the sun, The spectral firms of gases They become visible. Loeb’s hypothesis has been received with strong skepticism. Chris Lentott, Astronomo of Oxford, described the suggestion In Live Science as “a nonsense about stilts and an insult to the exciting work that is being done to understand this object.” This reaction is not by closure, but because the overwhelming evidence available points in another direction. The reality is that 3i/Atlas is a fascinating object, a piece of another solar system that visits us very far, and that has probably more years than the Sun. Studying its composition and trajectory will give us very valuable information about how the planets are formed in other places of the galaxy. In Xataka | These real images were unthinkable before the Webb Telescope: they are planets orbiting other stars to 130 light years Image | Gemini Observatory/Noirlab/NSF/Aura/K. Meech (Ifa/U. Hawaii); Processing: Jen Miller, Mahdi Zamani (NSF/Noirlab)

The Belgian police stop Huawei representatives for alleged corruption in the Eurocamara. The EU investigates the Chinese plot

The Belgian police have made records at the European headquarters of Huawei in Brussels and has arrested several of its lobists for alleged corruption of Eurodiputados, as progress Reuters. What happened? The Belgian Prosecutor’s Office has deployed a hundred agents in almost two dozen places in Belgium and Portugal as part of an investigation for alleged bribery, falsification of documents and money laundering. The researchers have seized two offices in the European Parliament belonging to supposedly involved parliamentary assistants. Why is it important. This case threatens to become a second ‘Qatargate‘, the scandal that shook the Eurocamara in 2022 when several legislators were accused of receiving bribes from Qatar and Morocco. New research can seriously damage the credibility of European institutions, already weakened after that episode. Between bambalins. According to Belgian media, the plot of bribes would have operated “regularly and very discreetly from 2021 to the present, under the appearance of lobby Commercial. “The researchers They suspect that about fifteen Eurodiputados – actual and ancient – could be involved. In detail. Corrupt practices, according to Politicalthey would have included: Remuneration for adopting favorable political positions to Huawei. Excessive gifts, such as meals and travel expenses. Recurring invitations to football matches. The context. Huawei, which once was a power of lobby In Europe, he has suffered blows in recent years due to the security risks associated with his links with the Chinese government. The European Commission He has repeatedly warned that the company represents “materially higher risks than other 5G suppliers”. The European Parliament has confirmed that it will cooperate “quickly” with the Belgian authorities in the investigation. Meanwhile, Victor Negrescu, vice president of Parliament for transparency and anti -corruption, has described the accusations as “deeply worrisome.” The answer. A spokesman for Huawei has limited himself to declare that the company is “investigating” what happened and that “it is committed to compliance with all the applicable laws and regulations of the countries and regions in which it operates.” The Eurodiputados involved could see the lifting of their parliamentary immunity if the investigation progresses, a process that requires the authorization of the president of the Eurocamara, Roberta Metsola. From Xataka We have contacted Huawei to obtain their statements in this regard, we will incorporate them into this article as soon as we obtain them. In Xataka | I have tried Huawei’s triple folding: I am not sure for what, but I want one Outstanding image | Guillaume Périgois in Unspash

The National Police has arrested the alleged author of a cyber attack against NATO: it is linked to 40 more intrusions

Last Tuesday, agents of the National Police and the Civil Guard moved stealth through the streets of Calpe, in Alicante, until the domicile of the alleged responsible for tens of High Profile cyberbrains. THE LIST OF OBJECTIVES released by the authorities in a press release It includes institutions and organizations such as the North Atlantic Treaty Organization (NATO), the United States Army and the National Currency and Timbre Factory. During the registration, which materialized after months of previous research, cryptocurrencies and a variety of computer devices that are already being analyzed by the specialists were intervened. The name and age of the suspect have not been announced by the official roads, but police sources They have told the 20 minutes newspapers and the avant -garde that it is an 18 -year -old man who used to hide his true identity under the pseudonym “Natohub”. An attacker that aimed the institutions The detainee is accused of several crimes, including discovery and revelation of secrets, illicit access to computer systems, computer damage and money laundering. The National Police investigation started last year, after the complaint of a Madrid business association which detected in a cybercrime forum to someone who claimed to have stolen information from their website. In the system, the attacker had left a sign as proof of intrusion. {“Videid”: “X9DKWB6”, “Autoplay”: False, “Title”: “The National Police stops a suspect to infiltrate in NATO databases”, “Tag”: “Cybersecurity”, “Duration”: “60”} According to the authorities, the investigated continued with criminal activity, focusing on international organizations and government organizations. Thus, among its victims was the National Currency and Timbre Factory, the Public State Employment Service, the Ministry of Education, Professional Training and Sports, different Spanish universities, the United States Army, the General Directorate of Traffic, the Directorate General of Traffic, and the Generalitat Valenciana. The suspect, in the custody of the agents | Photo: National Police Natahub, they explain, changed pseudonym frequently to avoid being tracked, but it was possible to follow its track on the Dark Web, an area where all kinds of illegal content are shared. There he claimed to have a NATO database And he claimed attacks against the Generalitat Valenciana, the United Nations, the International Civil Aviation Organization, the Ministry of Defense and one of the Spanish security forces that participated in its persecution, the Civil Guard. In Xataka The Depseek online version has been publicly exposing users’ chats, according to Wiz. This is what we know The operation was developed with the collaboration of the National Cryptological Center (CCN) of the National Intelligence Center (CNI) in Spain. In the international arena, Europol and the United States Investigations (HSI) of the United States were involved. Now, the detainee is no longer behind bars. According to sources that spoke with reasonthe case entered into the orbit of the Court number 1 of Alicante, which left him provisional, although with the withdrawal of his passport. We will have to wait to see how the case evolves, especially because of the possible evidence that can be found in the intervened devices. Images | National Police | Home Office In Xataka | The Bank of Spain alerts a malware capable of “capturing bank credentials.” His name: Trickmo (Function () {Window._js_modules = Window._js_modules || ; – The news The National Police has arrested the alleged author of a cyber attack against NATO: it is linked to 40 more intrusions It was originally posted in Xataka by Javier Marquez .

North Carolina man killed his wife for alleged infidelity and then committed suicide

A tragic event has shaken the community of Fuquay-Varina, North Carolina, where George Lesniak, 63, allegedly shot and killed his wife, Cathleen Lesniak59 years old, local authorities reported. The tragic incident occurred on January 18 around 6:00 p.m., and shortly after the shooting, Lesniak posted a chilling confession on Facebook before taking his own life, reported New YorkPost. The Fuquay-Varina Police Department said the shooting took place at the family residence, a spacious house with five bedrooms and four bathrooms. Upon arriving at the scene, officers found George Lesniak with a “fatal self-inflicted injury.” In his Facebook post to an advanced driver assistance systems (ADAS) support group, Lesniak alleged that he had killed his wife after learning of her alleged infidelity. “My wife admitted to cheating on me, so I killed her. “I am about to commit suicide,” he wrote before taking his own life. More than 34 years of marriage The couple had been married for more than 34 years and his death has left the community in shock. Law enforcement officials have stated that there is no threat to the public and are conducting a thorough investigation due to the “complex nature” of the case. “This incident is deeply tragic and we urge the community to keep the family in their thoughts during this difficult time,” authorities added. Although the deaths are suspected to be the result of a murder-suicide, authorities have not yet officially confirmed this theory.. Lesniak’s original post was deleted shortly after the incident. Keep reading:

Four subjects arrested in Ohio for alleged robberies in athletes’ homes

The investigation of a series of high-profile property burglaries in Ohio led to the arrest of four men of Chilean nationality, who face multiple charges related to organized criminal activities. According to authorities, those detained would be linked to an organized crime network that targets multimillion-dollar residences, including alleged properties of professional athletes. The suspects were arrested earlier this month in Fairborn, Ohio, after being found in a van with allegedly stolen items, including a Louisiana State University (LSU) jersey and a Cincinnati Bengals cap. These items were related to a burglary that occurred on December 9 at a home near Cincinnati. The same day, Bengals quarterback Joe Burrow’s home was ransacked while he and his team were playing in Dallas. Although court documents do not confirm a direct connection between those arrested and the burglary at Burrow’s home, the incident reinforces the hypothesis that professional athletes could be targets of these criminal gangs. Thieves with a pattern According to the FBI, South American organized crime groups, including gangs formed by Chilean citizens, are using social media and other sources of information to identify and track high-profile athletes. This warning had already been issued to the NFL, NBA and NHL leagues in December. Among the confirmed victims of these thefts are stars such as Patrick Mahomes and Travis Kelce, players for the Kansas City Chiefs in the NFL, as well as Luka Doncic (Dallas Mavericks) and Mike Conley Jr. (Minnesota Timberwolves) in the NBA. The four arrested in Ohio face charges of: Engage in a pattern of corrupt activity. Be part of a criminal gang. Possession of criminal tools. In addition, authorities found devices used to break windows, false identifications, and found that the detainees were in the country illegally or had exceeded their permits. An investigation in progress Ohio Attorney General Dave Yost’s office said investigations continue, without offering further details about possible links to other thefts at athletes’ property. Keep reading: – Luka Doncic’s house in Dallas is robbed and thousands of dollars are taken

Log In

Forgot password?

Forgot password?

Enter your account data and we will send you a link to reset your password.

Your password reset link appears to be invalid or expired.

Log in

Privacy Policy

Add to Collection

No Collections

Here you'll find all collections you've created before.