You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
Spain and Portugal Blackout: SCADA Scans, DDoS Attacks Raise Questions
Simultaneous power cuts in Spain and Portugal coincide with prior SCADA scans and a Dutch DDoS attack, challenging the official weather-related explanation.
Spain and Portugal Blackout: The Day the Lights Went Out
The Iberian Peninsula plunged into darkness. A simultaneous power outage in Spain and Portugal left Madrid, Murcia, Galicia, Alicante, Zaragoza, Ávila, Segovia, Navarre, Cantabria, Cuenca, Toledo, Málaga, and several Portuguese cities without supply, according to testimonies accumulating throughout the day. Traffic lights stopped working and hospital systems were affected. In the Canary Islands and Balearic Islands, however, power remained on.
The pattern was not random. In previous weeks, an unusual volume of port and vulnerability scans on SCADA infrastructure of the Iberian electrical system had been detected, behavior consistent with the preparation of a massive cyberattack. On the same day as the blackout, government websites in the Netherlands also fell due to a DDoS attack, and internet exchange points operated on auxiliary power. The geographical coincidence began to look like more than just a coincidence.
What peine to the power in Spain and Portugal?
The blackout was neither gradual nor localized. It was simultaneous and peninsular. Early messages described a map darkening completely: Navarre, Cantabria, Levante, Cuenca, Málaga, Toledo, Madrid, Murcia, Galicia, Alicante, Zaragoza, Ávila, and Segovia. Portugal, entire, too. The only confirmed exception were the archipelagos.
Critical infrastructure took the worst hit. Dark traffic lights, hospitals operating on emergency systems. Meanwhile, phone towers continued transmitting, a detail that did not go unnoticed: the modulation of the masses, someone joked, must never be paralyzed by trivialities like a giant blackout.
The official cause took time to arrive and, when it did, did not convince everyone. There was talk of an unusual atmospheric phenomenon six days after the country celebrated its milestone of 100% renewable energy. The narrative did not match the prior SCADA scans or the Dutch DDoS attack.
Cyberattack, network collapse, or something worse
Hypotheses multiplied. Some argue it was a coordinated cyberattack, relying on prior scans of SCADA infrastructure and the simultaneous attack on Dutch government websites. Against this is the fact that no actor has claimed responsibility for the operation nor have conclusive technical analyses been published.
Another current points to a structural problem in the electrical system: dependence on intermittent renewables without sufficient backup. The argument is summarized in a phrase that circulated with sarcasm: green activists said solar and wind were enough. The uncomfortable detail is that the blackout coincided with the celebration of the renewable milestone.
And a third path, more political, points to Government management. Incompetence as the cause, spending on social policies as distraction. This is the reading that provides the least data and generates the most noise.
The business of emergency: who wins when there is no light
Mercadona became the only alternative to chaos. Its generators kept supermarkets open while the rest of the supply chain went dark. The data has its irony: private enterprise as the last bastion of public order when the public fails.
Comparison with other countries also appeared. In Switzerland, all in order, with two or three support systems and bunkers in every house. In the United States, during a similar blackout, there were more than 4,000 arrests for looting and thousands of fires. The implicit question: will Spain hold up without falling into looting? The answer, at the date of this discussion, remained open.
Theories that do not hold up
Far-fetched explanations were not lacking. Whether it was Russians, whether it was Pilingui, whether it was a false flag. Whether specific groups' marijuana plantations consumed the grid. Whether the British Government, through an investment fund owning a media outlet, sent a warning about Spanish foreign policy. None of these hypotheses have evidentiary support in available material.
What is verifiable is the technical pattern: prior SCADA scans, simultaneous DDoS attack in the Netherlands, peninsular cut. The coincidence is too precise to dismiss without further notice. But from there to pointing out culprits is a gap no one has traversed with proof.
The blackout left a floating question: was it a rehearsal, a warning, or an accident? Data points to the former. The official response points to the latter. And meanwhile, Mercadona's generators remain the only contingency plan that worked.
Summary of a discussion on Burbuja.info - Foro de economía, actualidad y política., translated from Spanish and reviewed before publication.
Read the full discussion (165 replies).
The Dutch government has asked the EU to decouple from common asylum policy. Brussels responds that rules are binding unless the European treaty is amended.
A calculation circulating in the debate attributes cuts to Vox that add up to less than €1.2 billion, against €44 billion a year with no identified budget line.
ERC Barcelona condemns Saturday's disturbances and calls on the City Council and the Generalitat to explain the lack of foresight and support for businesses.
A Vueling flight from Barcelona to Gran Canaria in Spain made an emergency landing after a bomb threat. The aircraft was moved to a remote area surrounded by security vehicles.