Spanish police arrested a 16-year-old Romanian national in Alicante identified as the administrator and main operator of the KillSec ransomware group. The September 30 operation, led by Hamburg authorities with Europol support, also resulted in arrests in the UK and Romania, alongside the seizure of five central servers and the group's leak site containing at least 110TB of stolen data. Investigators are probing approximately 1,000 suspected attacks worldwide, with 500 confirmed successful breaches since the group emerged in 2024. KillSec employed double extortion tactics demanding cryptocurrency ransoms and utilized AI to build and maintain its ransomware infrastructure. Authorities have secured the seized servers and are actively tracing criminal proceeds, including cryptocurrency assets linked to the operation.