New money, new laws, new urgency: can Spain’s CISOs beat the cyber-criminals?
23rd October 2025 • NH Collection Eurobuilding, Madrid
Spain is one of the most significant targets for cyber-attacks globally, but it is also one of the most active investors in cyber defence. Where should government and business focus next?
A huge additional commitment to cybersecurity
Spain is at the centre of Europe’s cyber storm. Authorities are now investigating whether smaller power generators were a weak link that was exploited by cyber criminals to target the electricity grid, causing widespread blackouts across the Iberian Peninsula. The authorities want answers from power suppliers about their cyber security, despite previous assessments suggesting hacking wasn't to blame.
Spain’s renewable energy boom has created a system of thousands of smaller generators, with internet-connected control systems, which has created more targets for hackers wanting to wreak havoc by injecting malware or disrupting power flows.
Whether or not the attack ultimately was or was not a cyber-attack is almost irrelevant. The vulnerability of the sector has been exposed, and it must now be rectified.
Meanwhile, Spain has become the fifth most popular target for hackers globally: the National Cybersecurity Institute (INCIBE) has recently highlighted that in 2024 overall, 97,348 cybersecurity incidents were recorded, 16.6% more than the previous year.
Cyberattacks against Spanish companies jumped 43% with 31,540 firms targeted.
Recent high-profile attacks have included a recent third-party incident at retail giant El Corte Ingles, attacks on Barcelona Taxi, the Down21 Foundation, and the tech company Inemlatic Electronics, retailers Tendam and Alcampo and other significant entities.
In response to these challenges, Spain has announced a €1.1 billion investment to enhance cybersecurity, focusing on critical infrastructure protection and resilience.
Additionally, Prime Minister Pedro Sánchez unveiled a broader €10.5 billion Industrial and Technological Plan for Security and Defence, 31% of which is earmarked for the manufacture and acquisition of new telecommunications and cybersecurity capabilities.
These initiatives reflect Spain's recognition of the evolving cyber threat landscape and its commitment to strengthening defences against future incidents.
The country is also introducing more cyber legislation. The draft bill for the Law on Security Coordination and Governance will be processed through a fast-track procedure and reflects the government’s view that "the number, scale, sophistication, frequency and effects of cyber incidents represent a serious threat to the functioning of networks and information systems".
This commitment makes Spain one of Europe’s most exciting cybersecurity markets today – for CISOs and those who serve them.
