Hacker Leaks Alleged Data of Three Spanish Transport Ministry Officials After Adamuz Train Crash

Published
Written by:
Lore Apostol
Lore Apostol
Cybersecurity Writer
Key Takeaways
  • Targeted Doxing: A hacker using the alias "Vindex" has leaked the alleged personal data of senior officials from Spain’s Ministry of Transport.
  • Political Motivation: The attacker published the data on a criminal forum, accusing the officials of responsibility for the fatal Adamuz train crash in Córdoba.
  • Cyberterrorism Investigation: Spain's National Police have initiated a cyberterrorism investigation to identify the perpetrator behind the politically motivated data leak.

A hacker operating under the alias "Vindex" has carried out a targeted doxing attack, leaking the sensitive personal data of three high-ranking officials at Spain's Ministry of Transport. The compromised information was published on a known cybercriminal platform, which constituted a significant security breach for government personnel and triggered a high-level law enforcement response.

Adamuz Train Crash Cyberattack and Political Retribution

The motivation behind the Vindex data leak appears to be political retribution. In the publication, the attacker explicitly blamed the officials for the Adamuz train crash in Córdoba, a tragic incident that resulted in 45 fatalities. 

The alleged leak affects three senior officials of the Ministry headed by Óscar Puente: the Secretary of State for Transport and Sustainable Mobility, José Antonio Santano Clavero; the president of Renfe, Álvaro Fernández Heredia; and the current president of Adif, Luis Pedro Marco de la Peña. 

Impacted details reportedly include:

By linking the data leak to this event, the perpetrator is attempting to frame the hack as an act of vigilante justice, a tactic that escalates the incident from a simple data breach to a politically charged attack. 

Law Enforcement Response and Investigation

In response to the Spanish Ministry of Transport hack, the Spanish National Police have launched a formal cyberterrorism investigation. The primary objective is to identify and apprehend the individual or group operating under the name Vindex. 

The investigation proceeds amid a pattern of similar politically motivated doxing incidents targeting high-ranking figures in Spain. In September, authorities started investigating a massive data leak of top government officials, including Prime Minister Pedro Sánchez.


For a better user experience we recommend using a more modern browser. We support the latest version of the following browsers: For a better user experience we recommend using the latest version of the following browsers: