The UN Panel of Experts listed the Spanish financial institution case among DPRK cyber-enabled financial theft activity targeting banks and cryptocurrency exchanges for sanctions-evasion revenue. The available evidence does not provide operational details for this specific institution, but frames the incident as part of DPRK efforts to steal and launder funds through channels harder to trace than traditional banking.