In the heart of Madrid’s financial district, inside the cavernous, glass-walled headquarters of the Cuerpo Nacional de Policía’s Cyber Division, Inspector Lara Mendes stared at her screen. On it was a single, unassuming line of text:

The culprit was a woman named Elisa Romero. She was not a hacker. She was a 58-year-old administrative sub-inspector who had been passed over for promotion four times. For twenty years, she had watched arrogant inspectors and corrupt colonels climb the ranks while she typed their reports. She knew the protocols better than anyone. She knew the loopholes. And when the force moved to Microsoft 365, she saw not a tool, but a battlefield.

“Microsoft stuff doesn’t send emails at 3:17 AM to a retired colonel in Seville,” Lara replied, turning her screen.

Over the next 72 hours, Lara and Tomás traced the ghost. The Correo 365 Policía account had been created the same day as the migration, six months prior, by a user with full administrative privileges. The user’s name was listed as . No real name. A placeholder.

“That’s the problem with the cloud,” Tomás admitted, finally serious. “You don’t delete things. You just… hide them. Someone hid a backdoor inside our own communication system. It’s not a virus. It’s a feature .”

The scandal became known as El Fantasma del Correo – The Email Ghost. Three corrupt colonels resigned. Two judges recused themselves from major cases. And the Cuerpo Nacional de Policía shut down its Microsoft 365 environment for six months, returning to paper memos and encrypted radios.