José Luis Huertas, known as Alcasec, has purportedly compromised the data from multiple Spanish government entities, including the National Commission on Markets and Competition (CNMC), the Civil Registry, the General Directorate of Traffic (DGT), and Ports of the State.

His recent arrest was part of an operation that also apprehended Francisco Martínez, formerly the Deputy Minister of the Interior, who is alleged to have played a crucial role in facilitating these activities.

The investigation, led by Judge María Tardón, is focused on a criminal organization accused of significant violations including organized crime, data breaches, money laundering, and unauthorized access to secure computer systems.

Judicial police have identified Alcasec's activities not only as financially motivated but as part of a more complex criminal intelligence network.

The inquiry was launched following a report from the CNMC regarding a massive exfiltration of personal data from mobile phone line customers.

Alongside the CNMC, Alcasec is accused of breaching the data of the Civil Registry, the DGT, and Ports of the State, which operates under the Ministry of Transport.

Investigators have identified data pertaining to energy companies, logistics firms, and commercial registries across multiple countries, including Andorra, Bolivia, and the Dominican Republic, which are often associated with money laundering activities.

Martínez is reported to have played a central role in structuring the companies that Alcasec allegedly exploited to facilitate illicit income.

During the proceedings, Tardón indicated that as a lawyer, Martínez would have had extensive knowledge regarding the utilization of these companies, suggesting his active involvement in the operations of the criminal organization.

Information obtained from his communications indicates he may have had a comprehensive understanding of Alcasec's hacking activities.

In a recent interrogation, Martínez stated that he only established two companies to assist Alcasec, who he described as a troubled youth without paternal support.

He claimed he did not profit from the data accessed and characterized the information gained as commonplace data available through commercial databases.

Despite this, he acknowledged risk regarding the legality associated with the data in question.

Alcasec utilized a server located in Switzerland, reportedly paid for with cryptocurrencies, to aggregate data from his hacking endeavors.

This server was hosted by a Zurich-based company that guarantees user anonymity and end-to-end encryption, with capabilities for remote management.

Investigators noted that Alcasec managed the server from his residence and other identified locations linked to his activities.

The server employed the Elasticsearch search engine, permitting real-time queries across various data points, and included tools for secure communication via Telegram, facilitating covert operations without leaving a digital footprint.

The operation signifies a transition from conventional cybercrime tactics to a more sophisticated international criminal enterprise under Alcasec's leadership, posing considerable challenges for authorities.

As a result of the investigation, codenamed 'Operación Borraska,' multiple arrests were executed on Tuesday, including Martínez, Alcasec, and an associate.

The court granted provisional imprisonment without bail for Martínez and Alcasec due to concerns over potential destruction of evidence associated with the case.

Both individuals have pending charges in other judicial processes, including Alcasec's impending prosecution related to a significant cyber attack on the Judicial Neutral Point, where he reportedly accessed details of over half a million Spanish taxpayers by impersonating justice officials.

The ongoing investigation, overseen by Judge José Luis Calama Teixeira, revealed that data obtained during previous breaches had been transferred to servers in Lithuania, alongside cryptocurrency assets valued at 838,000 euros that were believed to be linked to the sale of this information.

Alcasec is facing charges for continuous revelation of secrets and unauthorized access, while Martínez is also set to stand trial in April concerning his involvement in a separate corruption scheme, known as Operation Kitchen, where he faces serious allegations linked to the misappropriation of state funds.