Cyber Threat Actor: @FkPoliceAnonOps

The threat actor known as @FkPoliceAnonOps, also referred to as Anonymous Police, operates under the broader Anonymous hacktivist banner. Publicly available information indicates that the actor is based in Spain, although no further geographic details are provided. The alias appears on social media platforms, particularly Twitter, where statements and leaked data links are shared. The actor is not described as a state‑sponsored entity nor as part of a criminal consortium; instead, it is linked to the decentralized Anonymous collective. This affiliation suggests a motivation rooted in activism rather than financial gain.

The actor’s known activity focuses on Spanish law‑enforcement institutions, as demonstrated by the June 2016 intrusion into the Sindicat De Mossos d’Esquadra servers and the subsequent leak of police personnel data. The operation targeted the mupol.es domain, which hosts a mutual fund for Spanish policemen, and resulted in the exposure of approximately five thousand officers’ personal details, including names, surnames, email addresses, national identification numbers and MD5 password hashes. The actor explicitly stated that the leak was intended as a protest against Spain’s gag law, which restricts the publication of images of security agencies on social media. No indication of financial profit or espionage goals appears in the reported statements; the objective is framed as a demonstrative act of dissent. The actor used a public tweet to announce the leak and to provide links to the dumped data.

The leaked information was disseminated through file‑sharing links included in the tweet, and although the original copies were later removed from many sites, cached versions remained accessible online. The actor’s communication emphasized a warning to law enforcement, asserting that the disclosure would reveal the thin veil behind which police operate and that actions provoke counter‑reactions. No specific malware families, exploit tools, or initial‑access vectors are described in the source material, so technical details of the intrusion remain unspecified beyond the mention of access to the police telecom unit for investigative crimes. The operation is cited as a representative example of the actor’s pattern of using data leaks to challenge perceived governmental overreach. This incident remains one of the few publicly documented actions attributed to the @FkPoliceAnonOps handle.