180 degree turn in the hacking of the Tax Agency: investigations point to an external company

The Spanish Tax Agency (AEAT) has clarified once again that its systems have not been compromised following recent hacking suspicions. According to The Confidential and the latest research, The attack could have affected a private company outside the state agency.

This conclusion comes from a preliminary report, which rules out any direct intrusion into the AEAT platforms.

Although the Trinity ransomware group claims to have stolen 560 GB of information linked to the Tax Agencyso far they have not shown evidence of possessing that data nor have they demanded a formal ransom. However, the incident has raised alarm bells, especially among companies that manage third-party tax and labor information.

Cybersecurity at the center of the debate

The focus of the investigation points to a company specialized in tax and labor consulting. According to the AEAT, it would be a private entity that manages tax data of its clients, both individuals and small companies. Although the name of this firm has not been revealedit is known that they usually act as intermediaries in the management of tax procedures.

The attack, if confirmed, could have compromised sensitive information of these companies and their clients. This explains the caution of the agency attached to the Ministry of Finance in emphasizing that its own systems have not been affected. In any case, we will have to wait for the final report to confirm the details of this event.

The modus operandi of the Trinity group has not been entirely clear. Although they claim to have sensitive information from the AEAT in their possession, they have not presented conclusive evidence.. Additionally, there has been no formal ransom demand, something unusual in ransomware attacks of this caliber.

Cybersecurity experts highlight that cybercriminals often resort to intimidation strategies. They may exaggerate the scope of the attack or even use data obtained from old leaks to pass it off as recent information. This underlines the importance of carefully analyzing each incident before drawing conclusions.

This case once again puts on the table the need to reinforce securitynot only in public organizations, but also in private companies that handle sensitive information. Cybercriminals often exploit weaknesses in external entities to access valuable data.

In this context, both institutions and companies must collaborate closely to implement prevention, detection and response strategies against possible cyberattacks. This includes constant system updates, employee training, and the use of advanced protection tools.

For now, investigations continue.. The Tax Agency remains firm in its position that its systems have not been breached, and attention is focused on the possible security deficiencies of the private firm involved. Meanwhile, the authorities call for caution and not to fall into unnecessary alarmism until the real scope of the attack is confirmed.

This incident is a reminder that cybersecurity is a priority, especially in an environment where personal and business data is increasingly coveted by malicious actors.

Get to know how we work in ComputerToday.

Tags: cybercriminals, Treasury