Actor claims leak of 46.3 million Spanish…

CriticalBreachNo software to update

In 30 seconds

Alleged

The latest report says an actor using the handle "spain" is offering an alleged 80 GB database covering 46.3 million Spanish residents. The claimed contents include identity numbers, birth dates, addresses, nationalities and census registration information, but the data's authenticity and source remain unverified.

What happened

Alleged

The story began with a report about a dark-web forum listing for purported Spanish census and municipal register, or padrón, records. The seller allegedly posted samples and described names, DNI or NIE numbers, demographic details, registered addresses and histories of registrations, removals and address changes.

Why it matters

Inferred

If genuine and current, the combination of names, government identity numbers and home addresses could support identity fraud and unusually convincing impersonation scams. That risk is conditional because neither report independently authenticated the records.

What to do

Inferred

Spanish residents should be cautious with unexpected messages or calls that quote personal details. A name, address or DNI fragment is not proof that the sender is legitimate, so sensitive requests should be verified through an organization's official contact channel rather than links or numbers supplied by the caller.

Confirmed and still uncertain

Observed

Both reports describe samples and broadly similar categories of personal data. What remains unknown is whether the samples are authentic, current or representative, where the records came from, whether they were aggregated from older sources, and whether any government system was breached.

What people are saying

Observed

DailyDarkWeb explicitly characterized the listing as an unverified threat-actor claim rather than confirmation of a breach. DarkWebInformer likewise said the source and authenticity were unclear and labeled the claim unverified.

Evolution

Observed

The earlier report described the advertised fields but said no record count, price or acquisition method had been provided. A later post added the figures of 80 GB and 46.3 million residents, materially expanding the claimed scale without adding independent validation.

Reach

Observed

2 independent groups, 3 updates, and 16 engagements.

Technical detail

Alleged

The alleged dataset combines direct identifiers, including full names and DNI or NIE numbers, with dates of birth, sex, nationality, home addresses and registration dates. It may also contain longitudinal padrón information, meaning records of address changes, registrations and removals over time.

Sources and evidence

Observed

The available evidence consists of two social-media reports about a forum advertisement, each accompanied by an image. Neither item provides official confirmation, an independent technical examination of the database, or a statement from Spanish authorities, so the listing should not be treated as proof of a breach.