The report resulting from this committee’s investigation, which will specify the causes of the “zero” electricity incident, must be ready by next August, as required by the European Commission. Additionally, the European Electricity Coordination Group, which reports to the European Commission and independent regulators, will prepare an independent report from Brussels, at the request of the Spanish government.
In parallel, a judge from the Spanish National Court has also opened an investigation to determine whether the incident was a cyberattack. However, Red Eléctrica, the Spanish electricity grid operator, stated the day after the blackout that there was no evidence of a cyberattack against its facilities. Since then, the company has not issued any further statements on the matter.
In 2024, Spain suffered more than 100,000 cyberattacks, and every three days there was one considered “very serious,” according to information provided by the Executive branch a few days ago during the presentation of a set of cybersecurity and cyberdefense measures that complement the measures included in the National Cybersecurity Plan, approved in 2022 and involving an investment of €1.157 billion. Since 2015, cyberattacks have increased by 300% in the country.
