2026 Acosol — confirmed IT cyberattack; Qilin leak-site claim
Data compromised
Company: possible personal data of some customers/subscribers (basic identifiers, contact, DNI, contractual info, possibly payment means)—scope under investigation; Qilin listing did not publish an attested victim count in open indexes reviewed
Technical writeup
Acosol (public water utility for Costa del Sol Occidental, Spain) stated it detected a cyberattack on Sunday June 28, 2026 that partially affected corporate systems and temporarily disrupted some services. The company activated internal/external cybersecurity support and notified competent authorities including Andalusia's transparency and data-protection council. Early analysis indicated a malicious act that affected availability of certain information and may have compromised personal data of some customers (identifiers, contact, DNIs, contractual data, possibly payment means); Acosol said it had no evidence of fraudulent misuse and urged customers to scrutinize suspicious communications. Separately, Ransomware.live indexed a Qilin leak-site listing for Acosol discovered July 17, 2026—treat Qilin's data-theft marketing as unverified beyond the company's confirmed IT incident. No public attested victim count.
Root cause
Confirmed malicious cyberattack on corporate IT systems (detected June 28, 2026); Qilin ransomware group later listed Acosol on its leak site (unverified data-theft marketing beyond company notice)