The OCU suffers a cyberattack: internal data and documents are leaked

The Organization of Consumers and Users (OCU) has suffered a security breach that has compromised sensitive internal information, including more than 500 email credentials and passwords, as well as various confidential documents, as confirmed by elEconomista.es.
According to preliminary investigations, the leaked data dates back to an earlier period and has been disseminated on various forums specializing in cybercriminal activity, including spaces accessible on the conventional Internet, outside the Dark Web.
The OCU explains that the detection of this incident immediately activated its cybersecurity protocols, designed to evaluate each potential case with the utmost rigor. In this regard, the organization explains that:
What data has been leakedIn our organization, we apply strict data protection and information security protocols, always assessing whether a potential incident may pose a risk to people's rights and freedoms. Based on this assessment, we decide whether to notify the Spanish Data Protection Agency (AEPD) and/or the affected parties.
We want to emphasize that we already have security measures in place, and that this incident will serve to further strengthen our systems.
The disclosed information includes more than 500 usernames and passwords from internal OCU email accounts , as well as confidential documents relating to internal reports and communications. The cybercriminals announced the files' publication on an English-language hacking forum, stating that the data was not for sale and would be made public within 12 hours.
The OCU has already filed a complaint with the police and notified INCIBE, which is monitoring the breach.
The public and private sectors in Spain have experienced a notable increase in the number of security incidents in recent years. According to data published by INCIBE for 2024, more than 97,000 cybersecurity incidents were managed , 16.6% more than the previous year, of which 32.4% affected organizations and companies of all sizes .
eleconomista