Cyber attack on Madrileña Red de Gas: leak of customer personal data and reinforced security measures

On September 12, 2025, Madrileña Red de Gas, one of the main natural gas distributors in the Community of Madrid, suffered a cyberattack that compromised its IT infrastructure and caused the leak of its customers' personal data.

‍

Details and scope of the incident

Among the data presented are the CUPS number (Universal Supply Point Code), which identifies each gas meter, as well as contact and identification information of users. The company has confirmed that no bank details or access passwords have been compromised to their systems.

Madrileña Red de Gas manages more than one million supply points in the region, although it has not yet specified the exact number of those affected. The company immediately activated its security protocols and has carried out an exhaustive review of its computer systems, reporting the incident to competent authorities such as the National Institute of Cybersecurity (INCIBE) and the Spanish Data Protection Agency (AEPD).

‍

Rerivative risks and recommendations for customers

This type of attack is common as a basis for subsequent campaigns of phishing and impersonation, where cybercriminals use leaked information to gain the trust of victims and commit scams. Madrileña Red de Gas recommends that its customers exercise extreme caution in the face of suspicious communications, not to provide personal or banking data through unofficial channels and to report any irregularity to the authorities and banks.

As an additional measure, the distributor has reinforced the security of its Virtual Office by implementing a double authentication system (2FA), which requires a code sent to each user's email to access the platform.

‍

Context: cyberattacks in the energy sector in Spain

The energy sector is especially vulnerable to cyberattacks due to its high automation, critical infrastructure and the valuable information it handles. In recent years, the frequency and sophistication of these attacks have increased, affecting both large companies and public infrastructures.

Madrileña Red de Gas joins the list of companies that have experienced similar incidents, highlighting the urgent need to strengthen cybersecurity and adopt proactive protection strategies.

‍

🛡️ At Apolo Cybersecurity, we offer comprehensive audits, specialized training and digital protection services to protect your critical infrastructures and data. Contact us today to shield your organization from new attacks 🚨

The cyberattack suffered by Madrileña Red de Gas highlights the importance of implementing robust cybersecurity measures in essential service companies:

• Constantly update systems and audit vulnerabilities
• Establish rapid incident response protocols
• Implement multifactor authentication systems for access to critical platforms
• Train staff and sensitize users to the risks of phishing
• Collaborate with authorities and cybersecurity experts to anticipate and mitigate threats

Is your energy company prepared for a security breach?

‍