🚨🇪🇸 A threat actor known as gang, posting under the alias RP, is distributing a dataset allege...
Threat actor 'RP' claims to release 300K customer records from Spain's Iberdrola utility company.
A threat actor operating under the alias 'RP' from a group known as 'gang' has claimed to distribute a dataset containing approximately 300,000 customer records allegedly stolen from Iberdrola, one of Spain's largest energy and electricity utility companies. The actor describes this as a 'first phase' release, suggesting additional data may follow. The breach potentially affects a critical infrastructure operator providing essential services to millions of Spanish consumers.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Iberdrola?
Get an email when a new story names Iberdrola, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonA threat actor has allegedly stolen and released 300,000 customer records from Iberdrola, a major Spanish energy utility company, marking this as only the 'first phase' of data disclosure. This breach demonstrates the high-value target that critical infrastructure companies represent to cybercriminals, who can leverage stolen customer data for financial gain or further attacks. The incident highlights the cascading risks when essential service providers fail to adequately protect sensitive customer information. Critical infrastructure breaches not only compromise individual privacy but can potentially disrupt essential services that millions depend on daily.
What helps against this
How we list vendors- Incident response retainer
Experts are on call before the worst day, not searched for during it.
- Third-party risk management (TPRM)
You know which suppliers could hurt you, and you hear quickly when one of them is breached.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- malware — Iberdrola dataset leak