Police and Civil Guards conducted a coordinated operation across several provinces, including Madrid, Toledo, and Valencia, to dismantle a criminal network responsible for a series of heists. Authorities attributed the attacks to a single gang, which carried out thefts at bank branches by exploiting ATM vulnerabilities and using explosive devices. The operation, codenamed Lightning, culminated in early March with the arrest of six suspects and the seizure of substantial evidence tied to fifty-four charges. Among these were three robberies using force and explosives, another attempted robbery, ten corporate heists, thirty vehicle thefts, and crimes connected to a broader criminal group as well as acts impacting public health.
Members of the gang assembled a metallic device filled with pressed gunpowder. The component was crafted from items seized inside fireworks materials, and a resistor was integrated into the design. They connected the device to an electric battery before a planned attack, intending to trigger a powerful explosion. The blasts caused extensive damage to ATMs and the overall structure of branch offices, elevating the risk of collapse in some locations.
The group operated across multiple provinces, with actions centered in Madrid, Toledo, and Valencia. They targeted corporate headquarters and industrial facilities, using large, stolen vehicles to stage their assaults. The sequence suggested a level of organization and planning aimed at maximizing disruption and financial gain.
Three attacks in six months
The investigation began in July 2022, following the gang’s first assault on a bank branch, from which they withdrew more than 120,000 euros. Within three months, investigators documented a second hit that emulated the earlier method, yielding approximately 90,000 euros. A third attack occurred but involved an ATM equipped with advanced explosion-prevention systems, which thwarted the robbers and left them empty-handed.
Further inquiries revealed that the suspects were involved in additional robberies targeting companies. Notable incidents occurred in Gandía, Valencia, and Alcobendas, Madrid, where the gang reportedly seized multiple mobile phones and a sum of around 10,000 euros. The operation’s momentum eventually waned as law enforcement intensified surveillance and coordinated arrests.
At the start of March, authorities concluded the main phase of the investigation. Nine communications were traced to the gang, including one that originated on a commercial vessel, signaling the breadth of their activities in Madrid and Toledo. In a separate search, investigators discovered a nursery facility linked to the group, along with materials that suggested an intent to obtain stimulants, underscoring the broader reach of their criminal network.
Overall, the Lightning operation not only disrupted a dangerous criminal enterprise but also highlighted the collaboration between police and security agencies in pursuing organized crime across regional borders. The case illustrates how modern heists can combine explosive mechanisms, stolen vehicles, and targeted assaults on financial institutions, challenging authorities to adapt rapidly and respond decisively.