This is what we know about the alleged ‘hacking’ of the Treasury

From names and ID numbers to names and bank account codes of more than 47 million taxpayers in Spain. That is, at least, the information that a cybercriminal claims to have obtained from the Ministry of Finance, and that he would be offering in at least one of the many forums dedicated to trading stolen data. The question is inevitable: are we facing a real leak? And, whatever happens, what should be done in a scenario like this? Let’s go in parts. The alleged leak. As Hackmanac points outon January 31, a publication appeared in a forum frequented by cybercriminals in which a user called ‘HaciendaSec’ stated the following: “Today I am selling the updated Treasury database that contains the information of 47.3 million citizens.” In that same message, he detailed that the file supposedly included information associated with taxpayers such as: ID DNI/NIF Full name Address (type of street, address, address details, postal code, province, municipality, town) Telephone (country code, telephone) IBAN Email Last collected Total collection Capture of the forum with part of the information hidden for security The usual goal: make money. It’s no secret: the main driver of cybercrime is usually money. And this case fits perfectly into that pattern. ‘HaciendaSec’ is offering these supposed data in exchange for financial compensation. We do not know the price of the database, but we do know the terrain in which these actors usually operate: payments in cryptocurrencies, a channel that allows them to receive illicit funds reducing, at least in theory, the possibilities of being tracked and identified. The big question: has Treasury data been leaked? Here comes the key point. If we stick to the story of ‘HaciendaSec’ itself, it would be “an updated database.” The problem is obvious: to what extent is the word of a criminal reliable? The user includes a supposed “sample” of the data, but this type of evidence says little on its own and does not confirm the real scope of the incident, or even if it exists as such. In these types of cases it is advisable to maintain skepticism: sometimes these are recent and legitimate leaks, but other times we are dealing with compilations of other breaches, data that has already been circulating for a long time, or outright hoaxes designed to sell smoke (and make money). What the Treasury says. From Xataka we have contacted the Treasury to request comments on this matter. The official response, for now, is that they have no indication that their systems have been compromised. Of course: they also tell us that those responsible for security are working to rule out any type of intrusion. So, for now, we have to wait for more clarity about what happened. But in the meantime, it is advisable not to sit idly by. What to do about the alleged ‘hacking’ of the Treasury. As things stand, we have two different levels: what the author of the publication claims and what the Treasury maintains, which maintains an internal investigation without conclusive signs of compromise. In such a scenario, the most sensible thing is to act prudently and take preventive measures. In short: be attentive, distrust by default and verify before accepting anything as good. Anti-spoofing tools. We should be attentive to the campaigns phishing and impersonation, which is where many people end up falling. The Tax Agency remembers that it never requests confidential, economic or personal information, account numbers or card numbers from taxpayers by email, SMS or Bizum, nor does it attach annexes with invoice information or other types of data. Additionally, he recommends: Do not open messages from unknown or unsolicited users, delete them directly. Do not respond under any circumstances to these messages. Be careful when following links in emails even if they are from known contacts. Be careful when downloading email attachments, even from known contacts. Images | Treasury | freepik In Xataka | How often should we change ALL our passwords according to three cybersecurity experts

Someone has stolen $ 1.5 billion in a cryptocurrency market. It is the greatest crypto hacking in history

The cryptocurrency market had been encouraged again months ago. Everything seemed relatively quiet, but two serious events in this segment have brought us again those sensations of distrust and insecurity. And it will not be easy to get rid of them. A historical theft. Last Friday someone managed to hack the market for the sale of BYBIT cryptodivisas. The firm He quickly warned how they had detected “unauthorized activity” in their systems. It was the greatest cryptocurrency hacking in history: it is estimated that the attackers (s) managed to steal $ 1.5 billion in the form of ETH. The previous most important robberies had been the 470 million dollars stolen in the Mt Gox hacking In 2014, the 530 million coincheck In 2018 or 650 million from Exploit Ronin Bridge In 2022. Lazarus group as suspicious. At the moment the firm does not know how the hacking was performed, but apparently the company’s laptops were not compromised and the problem affected Safe, the “cold” purse of the platform. Cybersecurity consultant Arkham Intelligence indicates that Lazarus Group had been responsible, a statement based on The investigation of the expert in this area Zachxbt. Bybit says to be covered. Ben Zhou, CEO of Bybit, highlighted How his criptomoned sale market had enough reserves to cover hacking and cryptocurrency withdrawal – especially, especially, Stablecoins– Although for a few hours They blocked some functions of their purses to guarantee their safety. A few hours ago Zhou indicated how they had managed to cover virtually all funds. Panic in Bybit. The theft has caused many users to withdraw funds in Bybit for fear that these funds will also end up being stolen. As indicated In Coindeskin the hours following the HACKEO Bybit he saw how their clients withdrew 4,000 million dollars in funds. Of the 16.9 billion dollars managed in crypto assets in Bybit, the firm went to manage 11.2 billion dollars According to defillama data. Can Ctrl-Z do to the block chain? Some users asked if it would be feasible to make a kind of “roll-back” of the Ethereum block chain. That would allow us to undo the changes made by hackers and return the status of that great book of accounts to how it was before hacking, but it is not clear that this is possible. Experts indicate according to Coindesk that something like this would be possible, but the interactions between the Smart Contracts and their internal architecture make it not easy. It would be necessary to reach a consensus, and could even cause a division of the Ethereum block chain in two. Just when in the US the thing was encouraged. The robbery occurred just the day Coinbase had managed to reach an agreement with the United States Securities and Exchange Commission leave the demand without also being issued. Donald Trump’s re -election had promoted the value of cryptocurrencies, but since his appointment we have lived several worrying events. Memecoins, Trump and Milei. The scandals have been especially primed with the Memecoins created or supported by Trump and especially by Javier MileiPresident of Argentina. Both grew in a brilliant value and then collapsed in a mysterious and disturbing way, which points to possible fraud in which a few privileged were winning while hundreds of thousands of people lost their investments in these cryptodivisas. Distrust and insecurity, the eternal condemnation of crypts. The scandals with these memecoins and the spectacular bykit hacking return us the constant feeling of insecurity and distrust that the cryptodivisas have always generated. The institutional interest and a certain tranquility in recent times seemed to have softened that environment, but these new events will probably make more people think twice before investing in this type of assets. It is a bad idea to leave your cryptocurrencies in an “Exchange”. The truth is that these robberies have confirmed that their security measures can end up being insufficient to protect their customers’ funds. The most recommended form of experts to save these cryptocurrencies is do it in physical pursesdo not leave them in the purchase market for sale of cryptocurrencies (“Exchange”). Image | KANCHANARA In Xataka | A British did not let his album search with Bitcoins in the trash for years: now he considers buying the landfill

Timeline of Prince Harry’s lawsuit against tabloids for phone hacking and intrusion

LONDON — Prince Harry’s lawsuit against The Sun concluded dramatically on Wednesday with an apology from the newspaper’s publisher for “serious intrusion” and illegal activities over a 15-year period. The settlement, which includes a “substantial” damages award for Harry, is the latest dramatic twist in two decades of legal drama over the ruthless practices of the British press in the days when newspapers sold millions of copies and shaped the popular conversation. The scandal destroyed a newspaper owned by Rupert Murdoch and cost the tycoon hundreds of millions of dollars to settle lawsuits from former tabloids. It also fueled Harry’s quest to tame the British press, which he blames for dividing his family, tarnishing his life and harassing both his late mother, Princess Diana, and his wife, Meghan Markle. Below is a chronology of the legal dispute: November 2005: Murdoch’s Sunday tabloid News of the World reports that Prince William has a knee injury. A complaint from Buckingham Palace sparks a police investigation which reveals that information for the story came from a voicemail that was tapped. January 2007: Glenn Mulcaire, a private investigator who worked for the News of the World, is sentenced to six months in prison and the newspaper’s editor, Clive Goodman, to four months for tapping royal advisers’ phones to listen to messages left by William and others. Goodman later admits to hacking William’s phone 35 times and that of his then-girlfriend Kate Middleton—now Princess of Wales—more than 150 times. Murdoch’s company initially maintains that the illicit behavior was the work of two rogue employees who acted without the editors’ knowledge. January 2011: British police are reopening an investigation into phone hacking by tabloids after the News of the World says it has found “significant new information”. April 2011: News of the World admits responsibility for phone hacking. The following month, he agrees to pay actress Sienna Miller £100,000 to settle an espionage claim. Murdoch’s News Corp. has since paid to settle claims by dozens of celebrities, politicians, athletes and others against News of the World and its sister tabloid, The Sun, although it has never accepted responsibility for the hack by The Sun. July 2011: The Guardian newspaper reports that News of the World journalists tapped the phone of Milly Dowler, a murdered 13-year-old schoolgirl, while police were searching for her in 2002. The revelation causes public outrage and prompts Murdoch to close the News of the World. , 168 years old. November 2012: A media ethics inquiry led by a judge and ordered by then-Prime Minister David Cameron concludes that the “scandalous” behavior of some in the press had “wreaked havoc on the lives of innocent people whose rights and freedoms have been disregarded.” . Judge Brian Leveson recommends the creation of a strong press watchdog, backed by government regulation. Their findings have been partially implemented. October 2013: Former News of the World editors Andy Coulson and Rebekah Brooks are on trial alongside several other defendants at London’s Central Criminal Court on charges of phone hacking and illegal payments to officials. After an eight-month trial, Coulson is convicted and sentenced to 18 months in prison. Brooks is acquitted. She is now chief executive of Murdoch’s British newspaper business. December 2015: England’s attorney general says there will be no further criminal cases against Murdoch’s UK company or its employees, or against 10 people under investigation by rival Mirror Group Newspapers, including former Daily Mirror editor Piers Morgan. Both companies continue to pay to settle espionage lawsuits. 2019 onwards: Prince Harry launches lawsuits against three newspaper groups: Murdoch’s News Group, Mirror Group and Associated Newspapers. He alleges that stories about his student years, teenage antics, and relationships with girlfriends were obtained through wiretapping, wiretapping, deception, and other forms of illegal intrusion. February 2021: Harry’s wife, Meghan, wins an invasion of privacy lawsuit against Daily Mail publisher Associated Newspapers over the publication of a 2018 letter she wrote to her father. June 2023: Harry testifies in his case against the Mirror Group, becoming the first British royal in over a century to appear in the witness box. December 2023: Enrique wins his case against the Mirror Group when a judge rules that the Mirror newspapers had hired private investigators to snoop on personal information and engaged in illegal phone hacking for more than a decade. He is awarded legal costs and £140,000 in damages. February 2024: Mirror Group agrees to pay Enrique’s legal costs and undisclosed damages to resolve outstanding claims. Enrique says he feels vindicated and promises: “Our mission continues.” January 21, 2025: The trial is about to begin in the lawsuits by Enrique and former Labor Party lawmaker Tom Watson against The Sun. They are the only two remaining among dozens of plaintiffs after others accepted legal settlements rather than face potentially ruinous legal bills. The trial is delayed as attorneys for both sides say they have been conducting intense negotiations over a settlement. January 22, 2025: Both parties announce agreement, News Group Newspapers offers “a full and unequivocal apology to the Duke of Sussex for The Sun’s serious intrusion between 1996 and 2011 into his private life, including incidents of illegal activities carried out by private investigators working for The Sun.” Enrique’s lawyer, David Sherborne, calls it a “monumental victory” and declares: “The time for reckoning has come.” Enrique’s case against Associated Newspapers, which publishes the Daily Mail, is ongoing.

Log In

Forgot password?

Forgot password?

Enter your account data and we will send you a link to reset your password.

Your password reset link appears to be invalid or expired.

Log in

Privacy Policy

Add to Collection

No Collections

Here you'll find all collections you've created before.