On the morning of April 28, 2025, a massive power outage plunged large parts of Spain and Portugal into darkness, disrupting daily life across the Iberian Peninsula. The blackout, which began around 12:30 PM CET, affected major cities including Madrid, Barcelona, Lisbon, and Seville, halting metro systems, grounding flights, and disabling traffic lights. The cause of the outage remains under investigation, with authorities not ruling out a cyberattack.​ 

Chaos Unleashed: The Iberian Blackout

The sudden loss of power brought transportation to a standstill. Metro services in Madrid, Lisbon, and Porto were halted, and national train services by Renfe ceased operations. Air travel faced significant disruptions; Madrid-Barajas Airport lost power, grounding flights, while Lisbon Airport operated on backup generators. Traffic lights failed, leading to gridlock in urban centers, and mobile networks experienced outages, leaving residents disconnected.​

The blackout’s impact extended beyond Spain and Portugal, with parts of southern France and Andorra also experiencing power interruptions. The widespread nature of the outage prompted emergency responses from both countries, including the activation of crisis committees and coordination with European energy partners to restore power.​

A Digital Assault? Investigating the Cause

While the exact cause of the blackout is still being determined, the possibility of a cyberattack has not been dismissed. Spain’s grid operator, Red Eléctrica, and Portugal’s E-Redes are working with cybersecurity agencies to investigate the incident. The scale and suddenness of the outage have raised concerns about the vulnerability of critical infrastructure to digital threats.​

Could Russia Have Been Behind This?

This event brings to mind previous cyberattacks on power grids, notably in Ukraine. In December 2015, a coordinated cyberattack attributed to the Russian hacker group Sandworm disrupted electricity supply to approximately 230,000 Ukrainians. A year later, a similar attack using the Industroyer malware caused further outages in Kyiv. These incidents marked the first known successful cyberattacks on power grids, highlighting the potential for digital threats to cause real-world disruptions.​

Russia doesn’t just fight wars with tanks and bullets anymore—they’ve gotten real cozy with keyboards and malware. Lately, their cyber sights have been set on countries like Portugal and Spain, and it’s no coincidence. Europe’s been lining up behind Ukraine like a pack of bulldogs, and Moscow isn’t exactly handing out thank-you notes for the support. Instead, pro-Russian hacker groups have been hammering Spanish government websites, fact-checking outlets, and critical sectors, sending a crystal-clear message: keep backing Ukraine and you’re going to feel it where it hurts—right in your digital guts.

But this isn’t just about punishing governments. No, Russia’s aiming for something a lot sneakier. They want chaos. Confusion. Dissatisfaction. They’re not out to win some cyber version of Normandy; they’re trying to get inside the heads of everyday citizens. By crippling infrastructure and flooding the zone with disinformation, they hope to erode trust in democratic leaders and get folks questioning whether all this Ukraine support is really worth it. Divide and conquer, updated for the information age.