In a concerning development, a threat actor has recently come forward with claims of possessing and intending to sell an extensive database containing the personal details of Spanish citizens. The alleged database, purportedly encompassing individuals born between 1926 and 2004, boasts an impressive 39.8 million records, comprising information such as National Identification Numbers (NIF), names, surnames, dates of birth (DOB), addresses, cities, and postal codes.
The dataset’s comprehensive columns, including NIF, name, surname, secondary surname, DOB, address, city, and postal code, highlight the depth and breadth of personal information available. This disclosure has prompted concerns regarding potential privacy violations and the illicit use of sensitive data. With an asking price of $10,000, the sale of such a vast dataset underscores the growing threat of personal data commodification on the dark web.