A threat actor has allegedly published a large dataset on a dark web forum, claiming to have exfiltrated sensitive personal data. The leak, which reportedly contains more than 600,000 records, includes names, identification numbers (DNI/NIF), full addresses, and other personally identifiable information.
According to the post, the data spans multiple years and appears to affect individuals from various regions across Spain, with a notable concentration of entries linked to Madrid.
While the authenticity of the breach remains unverified, the threat actor has presented sample entries as “proof” of the leak. These entries allegedly reveal highly detailed personal data — including full names, gender, addresses, and national identification numbers.