According to CoinMeta, Spanish police arrested a 16-year-old Romanian teenager in Alicante who was the administrator and main operator of the KillSec ransomware organization. Europol took control of the organization's servers and the leak websites and recovered 110TB of stolen data. The operation involved searches at 8 residences in Spain, Greece, Romania, and the UK, investigating approximately 1,000 suspected attacks worldwide, of which about 500 were confirmed to be successful. Two other suspects in their 20s were arrested in the UK and Romania, respectively, and a Dutch man residing in the UK was prosecuted and arrested in Puerto Rico. The KillSec group has been active since around 2024, often demanding ransoms in cryptocurrency. Investigators are tracking the funds obtained by the organization.