top of page

Massive Blackout Paralyzes Iberian Peninsula; Cyberattack Investigation Underway


Widespread Power Outage Hits Spain and Portugal


On April 28, 2025, a massive power outage struck the Iberian Peninsula, leaving nearly 60 million people across Spain and Portugal without electricity. The blackout, which began at 12:33 PM local time, disrupted transportation, communication, and essential services, marking one of Europe’s most significant power failures in recent history.


Major Disruptions Across Both Nations


In Spain, train systems halted, metros were evacuated, and traffic lights went dark, causing widespread traffic congestion. In Portugal, Lisbon’s airport was temporarily shut down and mobile networks were severely affected. By evening, power was restored to approximately 90% of Spain and most of Portugal, but full restoration took nearly 23 hours.


Cyberattack Suspicions Trigger High-Level Probe


Despite early statements from Spain's national electricity operator (REE) ruling out a cyberattack, Spain’s High Court has launched an official investigation to determine if the blackout was caused by a targeted cyber incident. Judge Jorge Calama is leading the inquiry, which could classify the incident as a terrorism-related offense if foul play is confirmed.


Prime Minister Pedro Sánchez urged caution, noting that the lack of immediate evidence does not eliminate the cyberattack theory. Adding further intrigue, a pro-Russian hacker group has reportedly claimed responsibility for the incident—raising the alarm about the growing threat of cyber warfare targeting civilian infrastructure.


Experts Debate the True Cause


Other theories suggest the blackout was triggered by a technical fault or a rare atmospheric phenomenon, involving oscillations in high-voltage lines. However, meteorological agencies in Spain and Portugal have denied the presence of any unusual weather patterns at the time. Some energy analysts point to the grid's increasing reliance on renewables, which may lack the stability of traditional energy sources.


Political Fallout and Economic Losses


The blackout has sparked political scrutiny, especially in Portugal where Prime Minister Luís Montenegro has requested an EU-led audit. Critics argue that both countries must bolster infrastructure to prevent similar crises.


Spain’s employers’ group CEOE estimates that the economic toll could exceed €1.6 billion in lost productivity and disrupted services.


EU and Cybersecurity Agencies on High Alert


The National Cybersecurity Institute of Spain (INCIBE) and the European Union Agency for Cybersecurity (ENISA) are monitoring the situation. While a technical fault remains the leading hypothesis, authorities are not ruling out the possibility of a state-sponsored or politically motivated cyberattack.


Looking Ahead: Calls for Greater Resilience


As power is fully restored and investigations continue, the incident underscores Europe’s growing need for robust energy infrastructure and advanced cybersecurity defenses. The European Commission has pledged to support Spain and Portugal in identifying vulnerabilities and enhancing grid security moving forward.



Want more cybersecurity guides?

Subscribe to our newsletter!


Recent Posts

bottom of page