Spanish authorities have arrested a suspect accused of leaking sensitive personal information belonging to members of key state organizations, including the National Cybersecurity Institute (INCIBE). The individual, known as a doxer, allegedly published the data online, exposing government employees to potential harassment or identity theft.

Details on the exact number of affected individuals or the type of data leaked remain sparse. The arrest, announced by the Spanish National Police, underscores ongoing efforts to combat doxing—a practice where private information is maliciously shared without consent. The suspect's identity has not been disclosed pending further investigation.

The breach targeted critical state institutions, raising concerns about insider threats and operational security. While the source did not specify the attack vector, law enforcement emphasized that the leak involved unauthorized access and public dissemination of sensitive records.

No immediate reports indicate the data was used in further attacks, but authorities have urged vigilance. The investigation is ongoing, with potential charges including violations of data protection laws and espionage-related offenses.

This case highlights broader risks in the cybersecurity landscape, where doxing can erode trust in public institutions. The arrest serves as a deterrent, but the incident reveals vulnerabilities in internal data handling procedures among government entities.