Guardia Civil arrests Ciudad Real hacker who used AI in attacks on city council systems

The arrest

Guardia Civil officers detained one person in Ciudad Real on suspicion of discovering and disclosing secrets, illicit access to information systems and attempted extortion of victims. The force said the suspect's involvement in multiple unauthorised accesses to computer systems of Spanish public and private entities had been established. The force's press note credited the cooperation of the affected organisations as decisive for the investigation. The case concerns activity the investigators attribute to this one individual.

Targets of the intrusions

The Ciudad Real city council is among the affected bodies, after unauthorised access to the platform it uses to manage its Low Emission Zone. A software company that provides services considered essential to citizens and the public administration was also hit. Investigators later found numerous other entities had been affected, including public bodies and service companies whose systems were compromised without them detecting the access. Those organisations had not identified the intrusions at the time.

Role of artificial intelligence

Investigators examined the seized electronic devices and material and found the suspect made intensive use of AI-based tools to support the activity. According to the investigators, the tools were used to acquire specialised knowledge, solve technical difficulties, develop operating procedures and get past obstacles during the intrusions. The investigators concluded this gave the suspect technical capabilities well beyond what their prior training would suggest. The same tools lowered the knowledge barriers usually needed for offensive hacking.

Notifications and court proceedings

Information gathered in the probe allowed investigators to inform the affected entities of the intrusions they had detected. The notified organisations can now take steps to strengthen their systems and prevent new cybersecurity incidents. The investigation is being coordinated by Plaza número 3 of the Sección Civil y de Instrucción of the Tribunal de Instancia de Collado Villalba.