This article details a conviction resulting from a sophisticated credential harvesting attack against a Spanish government network. The attackers used a stolen digital certificate to gain initial access, then deployed a fake login page to phish court workers' passwords, subsequently stealing over half a million banking records. The operation utilized Lithuanian servers and cryptocurrency for transactions; no technical vulnerability, CVSS score, or specific software versions are discussed.
Data Security Spanish hacker Alcasec sentenced to prison for stealing banking details June 3, 2026 Share By SC Staff (Adobe Stock Images) Spanish hacker José Luis Huertas, known online as Alcasec, has been sentenced to two years and seven months in prison after accepting a plea deal. The 22-year-old admitted to stealing banking details from over half a million citizens, leading to his conviction and the seizure of his assets, based on information published by HackRead. Huertas, along with two accomplices, Daniel B.E. and Juan Carlos O.G., orchestrated a sophisticated cyberattack that compromised the Neutral Judicial Point, a network connecting Spanish courts and government bodies. The attack, which began in October 2021, involved using a stolen digital certificate from the Spanish traffic agency to gain access to a secure government network. A fake login page was then used to trick court workers into revealing their passwords. Huertas subsequently stole 574,908 bank records and sold them on a site called uSms, with Juan Carlos O.G. being a major buyer. The operation utilized Lithuanian servers and cryptocurrency for transactions. Source: HackRead SC Staff Related Data Security Grand Theft Auto V cheat service Atlas Menu hacked, user data exposed SC Staff June 1, 2026 The breach, reported by Have I Been Pwned, exposed nearly 64,000 accounts, including email addresses, usernames, scrambled passwords, IP addresses, and support tickets. Data Security Google engineer charged with insider trading using confidential data SC Staff May 29, 2026 Michele Spagnuolo, 36, a Google security engineer since 2014, is accused of leveraging internal access to Google's "Year in Search" data to make profitable trades on the Polymarket platform. Data Security Prison communication service Pay Tel exposed hundreds of thousands of driver’s licenses SC Staff May 29, 2026 Cybersecurity firm UpGuard discovered an unprotected Microsoft Azure server managed by Pay Tel containing at least 300,000 driver's license scans and other government-issued identification documents. Related Events Cybercast Beyond the Hype: The Cybersecurity Trends CISOs are Keeping an Eye on in 2026 On-Demand Event Cybercast Beyond the data perimeter: Why next-generation DSPM is the foundation for modern data security On-Demand Event Virtual Conference Securing the Future of Finance: Strategies to Counter Modern Cyber Threats On-Demand Event Get daily email updates SC Media's daily must-read of the most current and pressing daily news Business Email By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy . Subscribe Related Terms Block Cipher Cipher Ciphertext Cryptographic Algorithm or Hash Data Aggregation Data Loss Prevention (DLP) Decryption Diffie-Hellman Digital Signature Digital Signature Standard (DSS) You can skip this ad in 5 seconds