The 'hacker' who allegedly attacked the Judicial Neutral Point testifies before the National Court after his arrest

He would have had access to more than 500,000 bank accounts through the hacking of this system managed by the CGPJ

MADRID, 3 Abr. (EUROPA PRESS) -

The judge of the National Court José Luis Calama has taken a statement this Monday from a 'hacker' of Spanish nationality detained as the alleged perpetrator of the cyberattack suffered last October 2022 at the Judicial Neutral Point, the communication system managed by the Council General of the Judiciary (CGPJ) that allows centralizing and transferring requests for information between judicial bodies and the Tax Agency, the Police or the National Institute of Social Security.

Legal sources consulted by Europa Press confirm that the young man, who has been made available to the head of the Central Investigating Court Number 4, would have had access to more than 500,000 bank accounts through the Judicial Neutral Point.

It was on October 20 when Calama agreed to initiate preliminary proceedings as a result of a complaint filed by the governing body of judges warning of the cyberattack, which could have affected personal data of taxpayers deposited in databases. Data from the Tax Agency.

As first steps, the judge decreed the secrecy of the proceedings and requested a series of reports from the Tax Agency and the National Cryptological Center on the scope of the denounced facts. From the National Court they consider that the facts could constitute a crime against a high organism of the nation and, without prejudice to further qualification, of the crime of discovery and disclosure of secrets.

The Council itself reported the attack at the time, which would have been detected in the second half of October 2022. "From that moment, cybersecurity measures were adopted to contain and neutralize computer attacks of this type," explained the CGPJ in a statement.

The governing body of the judges indicated in it that the Judicial Neutral Point was "used by the attackers to access other public institutions" and stressed that in the attack "no data related to judicial proceedings or other information in power of the courts and tribunals.

From the Council they explained that, once the cyberattack was detected, the facts were brought to the attention of the Cybersecurity Operations Center of the General State Administration and its Public Bodies (COCS), as well as the National Cryptological Center (CCN-CERT).

According to the CGPJ, after said notification --and in coordination with both centers-- "the corresponding investigative and mitigating measures" were adopted. Likewise, the Council notified the Spanish Agency for Data Protection (AEPD) and the Directorate of Supervision and Control of Data Protection of the governing body of the judges.