Press note. The recent massive blackout occurred on April 28, 2025 in Spain has evidenced the vulnerability of the country’s critical infrastructure. Although the exact causes of the incident are still investigated and at the moment there is no evidence of a cyber attack, that possibility is not ruled out as the origin of the failure.
According to data from the National Cybersecurity Institute (INCIBE), cybersecurity incidents in Spain They increased 15% for 2024reaching more than 96,000 cases. Approximately 45% of Spanish companies have suffered some type of cyber attack in recent years. Beyond, the cybersecurity study in Spanish companies 2024, prepared by Zerod, shows that the number of companies suffered at least one cyber attack attempt during the last year reaches 84%, a more than alarming fact.
But beyond this, the truth is that the consequences of a cyber attack to critical infrastructure, such as electrical networks, transport systems, telecommunications or health, They can be devastating. For citizens, this translates into interruptions in the electricity supply, loss of access to health services, blockages in public transport or falls in mobile networks and the Internet.
“All this directly affects daily life, from the functioning of hospitals to access to basic information and services”keeps Víctor Ronco, CEO of Zerod, the first White Hackers Marketplace.
Critical infrastructure, in danger?
For companies, The effects can be equally serious. The paralysis of critical services can mean millionaire economic losses due to interruption of operations, impossibility of attending customers, deterioration of reputation and, in extreme cases, definitive closures. In fact, payments fraud is the most common consequence, affecting 38% of attacked companies. Impacts on the brand and reputation (27%) and loss of customers (24%) are also reported.
Besides, The public sector It has also been the target of cyber attacks, with a 190% increase in 2024. It is estimated that 34% of cyber attacks in Spain are directed to the State Administrations, which can generate serious disorders in the provision of essential services.
In this scenario, Víctor Ronco points out that “Cybersecurity must be a strategic priority. It is not just about protecting data, but also guaranteeing the continuity of essential services for society. Citizens trust that hospitals, electrical networks or transport always work, but a cyber attack can break that trust and put human lives at risk ””.
Although it is difficult to establish an exact percentage of probability of a successful cyber attack on critical infrastructure, the upward trend of these incidents and the growing sophistication of the attackers indicate a significant risk that requires immediate attention. According to estimates by Zerod cyberin -giving experts, the probability that a Spanish critical infrastructure suffers a serious attack in the next five years exceeds 60%.
The recent blackout and data on cyber attacks underline the urgent need to strengthen cyber basil at all levels and sectors, to protect not only the economy, but also the security and well -being of citizenship. Given this situation, organizations must adopt a proactive approach to cybersecurity. Zerod offers comprehensive solutions that include exhaustive security audits to identify vulnerabilities before they can be exploited by attackers, compliance services to guarantee compliance with regulations such as NIS2, RGPD and ENS, and the innovative model of Ciso as Service (Cisoaaas), which allows companies of any size to have the experience of a Chief Information Security Offer without the need for a hiring Full time.
