Cyberattack hits Spanish train operator user data

Spanish public railway company Renfe suffered a cyberattack that compromised some user data. According to Renfe, the incident originated in servers of railway infrastructure manager Adif that were previously compromised and interconnected with the company's systems.

The attackers accessed limited user information, mainly names and email addresses, but there is no evidence that the data was made public or that bank or financial details, payment methods, IDs, or other sensitive information were accessed. Renfe transported over 531 million people last year and stated that rail services were running normally.

The cyberattack was reportedly carried out by a criminal organization using a system similar to Anthropic's AI, which may have been a first for a Spanish public company, according to Spanish daily El Mundo. The incident lasted several days, and Renfe said it was the result of several weeks of attempted attacks that had been detected and blocked.

Brief written by urgent.news from The Local Spain, Kyiv Post, The Record — 3 reports on this story. Machine-written — may contain errors; check the original before relying on it.