Iberian Peninsula Power Outage Disrupts Internet Connectivity Across Spain and Portugal

Figure 1: Visual representation of the BeyondTrust vulnerability chain

The power outage began at approximately 12:30 PM local time on April 28, 2025. Initial reports indicated that the failure originated somewhere in the interconnected grid serving both Spain and Portugal, though the precise location and cause remained under investigation as of the evening hours.

Red Eléctrica de España issued a statement confirming "a significant disturbance in the electrical system" affecting multiple regions. The operator stated that restoration efforts were underway but provided no timeline for full recovery. Portuguese authorities reported similar conditions, with REN acknowledging widespread outages across the country.

Transportation systems experienced immediate impacts. Madrid's metro system suspended all operations, stranding thousands of commuters. Barcelona's transit authority reported similar shutdowns. In Portugal, Lisbon's metro and tram networks ceased operations. Air traffic control at major airports switched to backup systems, causing delays but avoiding complete shutdowns.

Mobile network operators reported degraded service as cell towers lost primary power. While many towers have battery backup systems, the extended duration of the outage in some areas began depleting these reserves by late afternoon.

Cloudflare's technical analysis provided detailed visibility into the internet connectivity impacts. According to the company's blog post published on April 28, 2025, Portugal experienced a traffic drop of approximately 50% compared to normal levels for that time of day. Spain showed similar patterns, with traffic reductions varying by region.

The Cloudflare data indicated that the outage affected both fixed-line and mobile internet services. DNS query volumes from both countries dropped sharply, suggesting that end-user devices lost connectivity rather than just specific services experiencing problems.

Network monitoring firm Kentik, cited in multiple reports, confirmed the traffic disruptions and noted that some international connectivity remained operational through submarine cable landing points that maintained backup power.

Spanish authorities stated that approximately 15 million people were affected by the outage at its peak. Portuguese officials reported impacts to roughly 5 million residents. These figures represented a significant portion of both countries' populations.

Figure 2: How the authentication bypass vulnerability works

The incident provided valuable data for grid operators and infrastructure planners studying cascading failure scenarios. Real-world events of this scale offer insights that simulations cannot fully replicate.

Emergency response protocols across both countries were tested under actual conditions. Hospitals, airports, and other critical facilities demonstrated their backup power capabilities, with most reporting successful transitions to generator power.

The outage highlighted the importance of infrastructure investment and may accelerate discussions about grid modernization and resilience improvements in both countries.

The outage revealed dependencies between power infrastructure and digital services that many users take for granted. Mobile networks, internet connectivity, and digital payment systems all experienced disruptions.

Transportation impacts stranded thousands of people in metro systems and caused significant traffic congestion as traffic signals failed. Emergency services reported increased call volumes, though most calls related to non-emergency situations.

Economic impacts, while not yet quantified at the time of reporting, were expected to be substantial given the duration and geographic scope of the outage. Businesses relying on electronic payment systems reported lost sales.

The interconnected nature of the Spanish and Portuguese grids meant that a failure in one system propagated to the other. While interconnection normally provides resilience benefits, it can also enable cascading failures.

Figure 3: Privilege escalation from user to SYSTEM level

Modern electrical grids operate as interconnected systems where power flows between regions and countries based on supply and demand. The Iberian Peninsula's grid connects Spain and Portugal, allowing power sharing and providing redundancy under normal conditions.

Grid operators use sophisticated monitoring and control systems to balance supply and demand in real-time. When generation or transmission capacity is lost unexpectedly, automatic systems attempt to isolate the affected area and prevent cascading failures. When these protective measures fail or are overwhelmed, widespread outages can result.

Internet connectivity depends on multiple infrastructure layers. Data centers and network equipment require continuous power. While many facilities have uninterruptible power supplies (UPS) and backup generators, these systems have limited duration and may not cover all network components.

Mobile networks rely on cell towers that typically have battery backup lasting several hours. Extended outages can exhaust these reserves, causing progressive degradation of mobile service even in areas where towers remain structurally intact.

Technical context (optional): The European grid operates as a synchronized system at 50 Hz. Significant imbalances between generation and load can cause frequency deviations that trigger automatic protective disconnections. The investigation will likely examine whether such frequency events contributed to the cascading nature of the outage.

The Iberian outage represents one of the largest power disruptions in Western Europe in recent years. The incident raises questions about grid resilience as countries increase reliance on renewable energy sources and face growing electricity demand from data centers and electric vehicles.

European Union energy policy emphasizes grid interconnection as a means of improving reliability and enabling renewable energy integration. The April 28 event demonstrates that interconnection can also propagate failures across borders, requiring careful coordination between national grid operators.

The internet connectivity impacts illustrate the critical infrastructure dependencies that modern societies have developed. Services from banking to healthcare increasingly rely on continuous network availability, making power grid reliability a digital infrastructure concern as well.

Confirmed:

• Power outages affected both Spain and Portugal starting around 12:30 PM local time on April 28, 2025
• Internet traffic from both countries dropped significantly, with Portugal experiencing approximately 50% reduction
• Major transportation systems including metro networks suspended operations
• Millions of residents in both countries were affected
• Restoration efforts were underway as of the evening hours

Unclear:

• The root cause of the initial failure
• The precise sequence of events that led to cascading outages
• Full geographic scope of the affected areas
• Timeline for complete restoration
• Whether any cyberattack or external factors contributed to the incident

Authorities in both countries stated that investigations were ongoing. Grid operators had not ruled out any potential causes at the time of reporting.

Grid operators in both countries are expected to release preliminary findings about the outage cause within the coming days. The European Network of Transmission System Operators for Electricity (ENTSO-E) typically coordinates post-incident analysis for major grid events.

Restoration progress will indicate the severity of any physical damage to grid infrastructure. Rapid restoration would suggest the outage resulted from a control system or protection failure rather than equipment damage.

Political responses in both Spain and Portugal may include calls for infrastructure investment or regulatory changes. European Union officials may also comment on implications for cross-border grid coordination.

Insurance and economic impact assessments will emerge in the following weeks, providing data on the financial consequences of the outage for businesses and the broader economy.