Renfe and Adif suffer a cyberattack that reportedly extracted 500 GB of information and compromised limited user data

Spanish rail entities Renfe and Adif have confirmed a cybersecurity incident involving the unauthorized extraction of approximately 500 GB of data. The breach, which originated in Adif’s servers before impacting Renfe, resulted in the exposure of limited user information, specifically names and email addresses. In response, both organizations isolated interconnected systems to contain the threat.

Despite the scale of the data exfiltration, officials report that the incident has not disrupted railway circulation or the standard provision of passenger services. Investigations are ongoing to determine the full extent of the compromise and to secure the affected infrastructure.