A sweeping and unexplained power outage has crippled large swaths of Spain and Portugal. Lisbon / Madrid — A widespread power outage plunge...
Lisbon / Madrid — A widespread power outage plunged parts of Spain and Portugal into darkness on Sunday, disrupting transportation systems, communication networks, and emergency services. While officials have not confirmed the exact cause, pro-Russian hacker groups have claimed responsibility for what some are already calling the most significant cyberattack on Iberian infrastructure in recent years.
A sweeping and unexplained power outage has crippled large swaths of Spain and Portugal.
Blackout Sweeps Across Iberia
The power failure struck around 3:20 PM local time, impacting major urban centers including Madrid, Barcelona, Seville, Lisbon, and Porto. Trains halted mid-journey, traffic lights failed, and hospitals were forced to switch to emergency backup systems. Flights were briefly suspended at several airports due to radar and communication malfunctions, according to aviation authorities.
According to Red Eléctrica de España (REE) and REN, the national grid operators of Spain and Portugal respectively, the outage was traced to “anomalies in the transmission network,” though they did not rule out sabotage or cyber-interference. Both agencies have launched joint investigations, supported by European Union cybersecurity teams.
Pro-Russian Hackers
Shortly after the blackout, a Telegram channel associated with the pro-Russian hacking group Killnet posted a cryptic message: “Today we turn off the lights in Europe. Tomorrow, the servers.” Another lesser-known group, NoName057(16), also published screenshots allegedly showing network access points into Iberian infrastructure, though these claims remain unverified.
While experts caution against taking online claims at face value, the nature and scale of the outage bear hallmarks of an advanced persistent threat (APT). “It could be a coordinated cyberattack targeting the grid’s control systems, such as SCADA or ICS networks,” said Dr. Alicia Figueira, cybersecurity analyst at NATO’s CCDCOE. “The political context cannot be ignored.”
Cyber Tensions in Europe
This incident comes amid heightened geopolitical tensions over NATO support for Ukraine and increased cyber activity linked to Russian-aligned groups. Earlier this year, Germany, Lithuania, and France reported major DDoS attacks against government platforms. The European Union Agency for Cybersecurity (ENISA) has repeatedly warned about vulnerabilities in the continent’s aging power grids.
The Spanish Interior Ministry has convened an emergency security meeting, while Portugal’s Prime Minister António Costa called the outage “an act of serious concern” and pledged a full investigation. Spain’s Defense Minister Margarita Robles did not rule out foreign state involvement.
Public Reaction
Social media platforms quickly filled with videos showing darkened cityscapes and emergency services responding to stalled elevators, dark subway stations, and overwhelmed call centers. Hashtags like #ApagonIberico and #CyberAttack trended on X (formerly Twitter).
By 6:45 PM, power had been restored to most affected regions, though authorities warned of potential instability or further disruptions. Internet traffic, which dipped sharply during the outage, slowly rebounded according to metrics from Cloudflare Radar.
Both countries have activated their national cybersecurity response teams and are working closely with the EU and NATO to determine the origin and intent behind the event. If confirmed as a state-backed cyberattack, it could mark a new phase in hybrid warfare — targeting civilian infrastructure to sow chaos and test Western resilience.
Meanwhile, citizens across Iberia are being urged to remain calm and stay updated through official emergency channels. EU Commissioner for Internal Market Thierry Breton stated: “The lights may go out, but our vigilance remains unwavering.”
