Spanish authorities have arrested an 18-year-old man suspected of launching cyberattacks against numerous high-profile organizations, including NATO, the US Army, and the United Nations. The hacker, who went by multiple online aliases, was apprehended in Calpe, a town in Spain’s Alicante province, after a series of targeted attacks on more than 40 organizations.
The arrest followed a detailed investigation that saw police seize electronic devices and identify over 50 cryptocurrency accounts linked to the suspect. Authorities allege that the hacker, who operated under names such as “Natohub” on the BreachForums cybercrime platform, was behind several data breaches between June 2024 and January 2025. His activities included stealing and leaking sensitive data, including personal information and classified documents, which he sometimes offered for sale or made available for free.
The hacker’s victims included top-tier global institutions, such as the International Civil Aviation Organization (ICAO), the US Army, NATO, and Spain’s national agencies, including universities and law enforcement. One notable breach involved the theft of tens of thousands of recruitment application records from the ICAO database.
As a result of his arrest, Natohub’s account was permanently banned from BreachForums, marking a significant blow to his illicit activities. Spanish authorities are continuing to investigate the scope of the data breaches and the financial gains made through cryptocurrency transactions. This arrest underscores the growing threat posed by cybercriminals to global security, with high-profile organizations becoming increasingly vulnerable to such attacks.
