Spain Ministry of Science Cyberattack Triggers Partial IT Shutdown

The Spain Ministry of Science experienced a cyberattack that forced a partial shutdown of its electronic services; a threat actor claiming the alias "GordonFreeman" asserts they exploited an Insecure Direct Object Reference (IDOR) to gain full-admin access and leak sensitive data including scanned IDs, passports, email addresses, IBANs, and academic records. The ministry suspended affected procedures and extended deadlines while assessing the breach; screenshots have been posted but the data has not been independently verified, leaving significant potential risks for identity theft and financial fraud.