The Spanish Data Protection Agency maintains an open investigation into the increase in security breaches and leaks of personal data in the Valencian Community, where incidents have been detected in Valencia, Alicante and Castellón that affect both public and private entities.
Increase in incidents and affected sectors
The National Cybersecurity Institute has registered more than 130,000 incidents nationwide in 2025, which represents a 25% increase compared to the previous year. In the Valencian Community, incidents with a direct impact on personal data have grown by 28% according to technical sources. Private clinics in Valencia have reported unauthorized access to medical records, while in Alicante a ransomware attack paralyzed municipal services and exposed unencrypted administrative documentsIn Castellón, academies and e-commerce businesses have acknowledged leaks linked to external providers who stored data in the cloud without adequate security measures. The Spanish Data Protection Agency has processed more than 1,300 cases for security breaches in 2025, 17% more than the previous year
Scams and impersonations on the rise
The National Police has detected a considerable increase in identity theft scams, using real information obtained in previous leaks. Valencia, Torrevieja, Gandía, Elche, and Alcoy concentrate the largest volume of complaints for account openings, contracting financial products, microcredit applications, or smishing campaigns. **The Civil Guard confirms that these scams grew by 22% in 2025**.From Asoban Lawyers they confirm that the consultations of affected individuals from the Valencian Community have increased significantly since the end of 2025. The lawyers point out that the majority of those affected were not informed of the breach in a timely manner, which hinders the adoption of rapid protective measures against possible fraud
"A large part of those affected was not informed of the breach in a timely manner, which hinders the adoption of rapid protection measures against possible fraud" - Spokesperson, Asoban Abogados
Oversight and regulatory demands
The Valencian Community, along with Madrid and Catalonia, presents the highest growth rate in claims for failures in the integrity and confidentiality of personal information. The investigation opened by the Spanish Data Protection Agency points to a toughening of regulatory requirements on Valencian companies and administrations. The agency has reiterated in its latest reports that supervision will be stricter in sectors that handle sensitive data and that sanctions will be proportional to the risk of the treatments affectedThe lawyers recall that any citizen whose data has been compromised has the right to know the origin of the incident, demand explanations about the scope of the breach, and claim compensation when there are economic damages, stress, reputational harm, or impersonations
The situation in the Valencian Community remains under investigation and surveillance by the competent authorities.