Cases › security breach › LR-2026-0715

Renfe cyberattack uses AI techniques to compromise user data in Spain

Preliminary Why: 1 report: Times of India group · subject to change · 1 independent report

Status: action reported, no fix

Severity moderate

Reported 26 Sep 2026

Industry railway

No source states: loss or records, developer and model, agent tool, could do, deployer.

Severity moderate: Test: data of others touched, with a bounded scope stated. Fact: the attackers accessed limited user information, mainly names and email addresses.

Spanish railway operator Renfe said a cybersecurity incident originated in servers of the infrastructure manager Adif, which it said had been previously compromised and was interconnected with Renfe's systems. Spanish daily El Mundo, citing sources close to the investigation, reported that a criminal organisation used a system similar to Anthropic's AI to attack Adif's website. Renfe said the attackers were able to access limited user information, mainly names and email addresses, and that there was no evidence of access to bank or financial details, payment methods or IDs. It said there was no conclusive evidence that the data was made public. A Renfe spokeswoman declined to say how many users were affected or when the breach happened. The Adif website was unavailable on Friday evening, and El Mundo reported the incident lasted several days. The sources do not state how the incident was detected.

What happened

1 · What it was doingAccording to sources close to the investigation cited by El Mundo, a criminal organisation used a system similar to Anthropic's AI against Adif's website.

2 · What went wrongRenfe said the attackers were able to access limited user information, mainly names and email addresses.

What was done

Renfe said it had suffered a cyberattack on Friday, and media reported criminals used AI in a first for Spain.

Risks

Data leaked or sent out
Primary32 incidents

Read from the sources; not yet reviewed by a person.

Controls

Not yet read for controls. Controls that mitigate the primary risk:

Harness

Network egress control

Application

Sensitive-data checks on outbound data · Output filtering and redaction · Human approval for high-impact actions · Data minimisation · Least-privilege access for the agent · Activity logs

Evidence

No source states: what it reached or did, how it was caught, when it happened, when it was found, how many records were exposed, the direct loss, a count of the other parties affected, any court case, the cause, what set it off.

Show the full account: 2 items from the primary sources

What happened, in order

Not dated in the sources:

Renfe said it had suffered a cyberattack that compromised some user data.
Adif's website was unavailable.

Show every field, with its source and grade

What happened

Earliest source we hold

2026-09-26

D inferred by us from the described behaviour, reason shown

What went wrong

security breach

C one secondary source states it

primary risk

RK04

D inferred by us from the described behaviour, reason shown

Impact

Severity

moderate

D inferred by us from the described behaviour, reason shown

Kind of harm

privacy

C one secondary source states it

Who was affected

limited user information, mainly names and email addresses

C one secondary source states it

Kinds of data exposed

names, email addresses

C one secondary source states it

Why this severity

Test: data of others touched, with a bounded scope stated. Fact: the attackers accessed limited user information, mainly names and email addresses.

D inferred by us from the described behaviour, reason shown

Context

Industry

railway

C one secondary source states it

Country

Spain

C one secondary source states it

LR-2026-0715 · version 1 · published 2026-11-01 after automatic checks; not yet checked field by field by a person · JSON