28 Sep, 2026 @ 16:55
1 min read

Personal data warning after hackers steal user information from Renfe and Adif websites

Cyberattackers targeted the websites of Renfe and Adif, stealing the personal data of millions of users.
Stock image of a Renfe Cercanias train pulling into Recoletos station in Madrid. Credit: David Canales

PERSONAL data belonging to millions of train passengers could be in the hands of hackers following a major cyberattack on Spain’s rail network.

Unknown attackers targeted the websites of state-owned rail operator Renfe and infrastructure manager Adif last week, stealing around 150 million data records, according to El Mundo.

The information is understood to include names and email addresses, although the full extent of the breach remains under investigation.

READ MORE: Malaga’s biggest homegrown tech company calls for EU code of conduct to tackle online scams

Cyberattackers targeted the websites of Renfe and Adif, stealing the personal data of millions of users.
Stock image of a Renfe Cercanias train pulling into Recoletos station in Madrid. Credit: David Canales

Renfe has said there is currently no evidence that hackers accessed bank details, financial information, payment methods, ID numbers or other particularly sensitive data.

The company also said there was no evidence so far that the stolen information had been publicly released.

The attack reportedly began through Adif’s systems before reaching systems operated by Renfe, which were connected to the compromised infrastructure.

Adif detected unusual activity on Thursday and launched an investigation, while also reporting the incident to Spain’s National Cryptologic Centre.

Neither company’s railway operations were affected, meaning trains continued to run normally despite the cyberattack.

READ MORE: Four masked men snatch driver and force him into 4×4 boot in latest broad daylight kidnapping in Barcelona

Renfe said it had already faced repeated hacking attempts over several weeks, all of which had previously been detected and blocked.

The latest breach prompted the company to bring its affected systems offline and hire independent cybersecurity specialists to help investigate and contain the attack.

The incident has raised fresh concerns over the security of personal information held by major public infrastructure providers.

Cybersecurity experts have warned that stolen names and email addresses can still be valuable to criminals, particularly when combined with information obtained from other data breaches.

Investigators are now working to establish exactly how the hackers gained access, how much information was taken and whether any of it has been circulated online.

Click here to read more Technology News from The Olive Press.

Granada-based reporter for the Olive Press and journalism student at NCTJ-accredited News Associates. My work has appeared in the Sunday Times, and I’ve collaborated with BBC TV and Radio. I’m particularly interested in science, environmental reporting, crime, and culture. Contact me with any leads at alessio@theolivepress.es

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Protesters pitch tents in central Madrid as demonstrations over Spain's housing crisis drag on
Previous Story

EXPLAINER: Protesters camp out in central Madrid as Maricarmen’s eviction triggers demonstrations over Spain’s housing crisis

Quinta Filippa
Next Story

Boutique hotel in Portugal that’s perfect for those who love nature, good food and an impeccable spa

Protesters pitch tents in central Madrid as demonstrations over Spain's housing crisis drag on
Previous Story

EXPLAINER: Protesters camp out in central Madrid as Maricarmen’s eviction triggers demonstrations over Spain’s housing crisis

Quinta Filippa
Next Story

Boutique hotel in Portugal that’s perfect for those who love nature, good food and an impeccable spa

Latest from Crime & Law

Create a free account, or log in.

Gain access to read this article, plus limited free content.

Yes! I would like to receive new content and updates.

Go toTop