A massive power outage recently struck Spain and Portugal, leaving millions without electricity and disrupting daily life across the Iberian Peninsula. While power has been largely restored, many questions remain about the cause of this widespread blackout. Could a cyberattack have caused this? While initial reports point to technical failures, the possibility of cyber involvement remains under investigation.
What’s Happening & Why This Matters
The blackout began on Monday, just after 12:30 PM CEST, and affected much of Spain, Portugal, and parts of France. The outage led to a complete loss of power across several major cities, including Madrid, Lisbon, Barcelona, and Seville. Transportation services were immediately halted, airports struggled to maintain operations, and businesses were forced to close. Some areas of Spain and Portugal continued to experience widespread disruptions into the following day.
The impact was felt most severely in urban hubs, where essential services such as subways, elevators, and traffic lights stopped working. In Madrid, local media reported that the city came to a standstill, with drivers navigating dark streets and emergency services scrambling to manage the situation. Airports in both countries faced delays, with TAP Air Portugal advising travelers to avoid heading to the airport until further notice. Meanwhile, Madrid’s emergency services conducted numerous elevator rescues and manually directed traffic as the blackout stretched.

By Tuesday, power had been restored to 99% of Spain. However, the transportation minister warned that the effects on rail services would continue. The recovery was quicker in Portugal, with most of the country’s power restored by Monday evening. Yet, both nations remained in an emergency, and authorities were still working to determine the full scope of the incident.
Spanish officials revealed that the outage was caused by a sudden loss of 15 gigawatts of power, which accounts for approximately 60% of the country’s electricity demand at the time. According to Prime Minister Pedro Sánchez, the loss occurred in a matter of five seconds, overwhelming the grid. This rapid and massive power drop created the conditions for the widespread disruption that followed.
Experts from the European Union Agency for Cybersecurity (ENISA) have ruled out a cyberattack as the cause of the blackout. Their initial findings point to a technical fault, possibly related to grid oscillation — a phenomenon where the power system struggles to stabilize due to power generation and consumption fluctuations. However, the ENISA team continues to monitor the situation, and the possibility of a cybersecurity breach has not been completely dismissed.

In Portugal, grid operator REN explained that the country’s reliance on Spanish electricity imports exacerbated the problem. Since Spain is one hour ahead and has cheaper solar power in the morning, Portugal relies heavily on this cross-border power supply. When the Spanish grid failed, Portugal had limited options for restoring electricity quickly.
Local governments in both Spain and Portugal rushed to respond. The Spanish Interior Ministry declared a state of emergency in Andalusia, Extremadura, Murcia, La Rioja, and Madrid. Portugal’s Prime Minister Luís Montenegro also declared an energy crisis, with the national grid operator warning that full restoration would be a complex task.
TF Summary: What’s Next
As Spain and Portugal recover from the blackout, the investigation into its cause remains ongoing. While technical faults are the leading theory, the potential for a cyberattack cannot be ruled out completely. Both countries face a monumental challenge in restoring full grid stability and preventing future disruptions. In particular, the lack of external connections for Portugal’s electricity grid highlights the vulnerability of countries that rely heavily on neighboring nations for power supply.
In the coming weeks, we can expect further updates on the recovery process, as grid operators in both nations work to prevent similar issues. For now, the focus remains on restoring normalcy, strengthening grid systems, and ensuring cybersecurity to protect against potential threats in the future.
— Text-to-Speech (TTS) provided by gspeech