Spanish authorities have arrested three people allegedly behind the massive data breach last month that revealed the credit card numbers and personal data of millions of Sony PlayStation users, and they appear to be bona fide members of Anonymous—the amorphous hacktivist group that tried to distance itself from the Sony infiltration.

The three hackers, who remain unnamed, were described by Spanish authorities as "the local leadership of the shadowy international network of computer hackers known as Anonymous," according to the New York Times. They operated a server that, in addition to the Sony attack, was used against government web sites in Egypt, Libya, Iran, and Algeria—countries that Anonymous hackers have targeted in recent years for political repression and internet censorship. In other words, they weren't, as some Anonymous members had claimed, simply malicious hackers using the group's name to throw investigators off the scent.