For the fourth consecutive week, Spain’s ongoing pirate site-blocking crisis has disrupted internet access for countless users and websites. LaLiga’s decision to target Cloudflare as part of its anti-piracy efforts has sparked backlash, legal challenges, and accusations of overreach. While Cloudflare is fighting back in court, cybersecurity group RootedCON has also launched a legal challenge against LaLiga’s authority to impose such blocks. Meanwhile, reports suggest efforts are underway to undermine RootedCON’s legal representation.

LaLiga’s Aggressive Approach

Under mounting pressure from widespread IPTV piracy affecting its live matches, LaLiga chief Javier Tebas vowed to take extreme measures to protect the league’s financial interests. Despite warnings, the impact of LaLiga’s site-blocking strategy has extended beyond pirate platforms, affecting innocent websites and internet users caught in the crossfire.

Like other major rights holders across Europe, LaLiga has relied heavily on site-blocking as a key anti-piracy strategy. However, Cloudflare—a company dedicated to improving internet security and connectivity—became an unintended casualty. Frustrated that Cloudflare’s services made it difficult to block pirate sites, LaLiga shifted its focus from individual platforms to the infrastructure supporting them. When negotiations failed, LaLiga followed through on its warning and began blocking Cloudflare, causing widespread disruption.

Cloudflare and RootedCON Push Back

Cloudflare swiftly took legal action to challenge LaLiga’s tactics, arguing that innocent users and legitimate businesses should not suffer due to the league’s dispute with piracy services. LaLiga, however, insists it has judicial backing for the blockade and places responsibility for the fallout on Cloudflare.

At the same time, RootedCON, a leading cybersecurity conference, has launched its own legal fight against LaLiga’s authority. RootedCON, which is currently hosting its 2025 event in Madrid, describes itself as a hub for cybersecurity professionals, ethical hackers, and technology experts. In response to the disruptions caused by the Cloudflare block, RootedCON has taken a firm stance in defense of internet freedom and open access to information.

Legal Challenge Against LaLiga’s Blocking Authority

RootedCON has been gathering evidence from affected users, website owners, and businesses to support its legal argument. In a recent statement posted to social media, RootedCON accused LaLiga of obtaining its site-blocking authority through “legal tricks.”

The group has formally challenged a December 2024 ruling by the Commercial Court Number 6 in Barcelona, which granted LaLiga the power to block pirate IPTV providers and, at its discretion, services that “facilitate” piracy, such as Cloudflare. The court initially justified its decision by stating that third parties would not suffer harm—an assertion that has been widely disproven by the ongoing disruptions.

“In a context where digital freedoms are under threat, RootedCON has filed a nullity incident against judgment No. 310/2024, obtained through legal maneuvering, which LaLiga is using to force operators to impose internet access restrictions in its fight against ‘piracy,’” RootedCON stated.

“This ruling, and the way it is being applied, violates fundamental rights and restricts free access to information—a right we consider non-negotiable.”

Unintended Consequences: Movistar Customers Affected

One of the most surprising developments in this dispute involves Spanish telecom giant Telefonica and its subsidiary Movistar. Reports indicate that Movistar customers have been inadvertently blocked from accessing LaLiga’s own football team websites due to LaLiga’s aggressive blocking measures.

In an ironic twist, Movistar—owned by Telefonica—executed LaLiga’s blocking orders, which then negatively impacted its own customers. To add another layer of complexity, Telefonica is a sponsor of the ongoing RootedCON event, creating an awkward situation at the cybersecurity conference.

What’s Next?

The legal battles between Cloudflare, RootedCON, and LaLiga are ongoing, and the long-term implications of this dispute remain uncertain. With Spain’s site-blocking policies under intense scrutiny, the controversy highlights the delicate balance between copyright enforcement and digital rights.

As these challenges unfold in court, internet users, businesses, and technology advocates will be watching closely to see whether Spain’s approach to piracy enforcement sets a dangerous precedent—or if it ultimately backfires on LaLiga and its allies.