Cyberattack hits Spanish train operator user data

Spanish railway company Renfe disclosed that it fell victim to a cyberattack on Friday, resulting in unauthorized access to some user data. Media outlets hinted that the perpetrators employed AI technology, marking the first instance of such an attack in Spain. According to Renfe, the "cybersecurity incident" originated from servers of railway infrastructure manager Adif, which had previously been compromised and connected to Renfe's systems.

The attackers managed to access limited user information, primarily names and email addresses, but there is no clear evidence suggesting the data was disseminated. Renfe assured that no bank or financial details, payment methods, IDs, or other sensitive information were compromised. The incident followed several weeks of detected and thwarted attempted attacks.

Rail services continued to operate without disruption. Spanish newspaper El Mundo reported that a criminal organization utilized "a system similar" to Anthropic’s AI in the attack, which left Adif's website inaccessible for several days. This marks the first cyberattack by AI on a Spanish public company's website. Renfe did not disclose the number of affected users or the exact timing of the breach.

Reports suggest the criminals obtained 500GB of data. Experts warn that advanced AI tools are increasingly being exploited in cyberattacks, leading to heightened concerns about potential hybrid attacks on Western allies of Ukraine amid Russia's prolonged conflict.