🇪🇸 Spain: Carrefour PASS Database Allegedly Offered for Sale on Underground Forum
A threat actor has advertised an alleged Carrefour PASS Spain database for sale on an underground forum.
* Carrefour PASS is Carrefour's consumer finance and credit services platform, offering credit cards, loans, and financing products to customers in Spain.
* According to the seller, the dataset allegedly contains:
* Customer records
* Employee information
* Internal company data
* The actor claims the database contains more than 300,000 records.
* Sample data displayed in the forum post appears to include:
* Spanish DNI numbers
* First and last names
* Dates of birth
* IBAN banking information
* Mobile and landline phone numbers
* Physical addresses
* Email addresses
* The seller specifically claims access to both customer and internal organizational data, potentially increasing the severity of the alleged exposure.
* No technical details regarding the intrusion method, affected systems, or compromise timeline were disclosed.
* At the time of reporting, Daily Dark Web could not independently verify the authenticity of the dataset or determine whether the information originates from a recent security incident.
Analyst Note:
Financial services and consumer credit databases are among the most valuable assets traded in cybercriminal communities due to the presence of identity, banking, and contact information. If validated, the exposure of customer records containing DNI and IBAN data could facilitate identity theft, account fraud, social engineering campaigns, financial scams, and targeted phishing attacks against affected individuals.
#DDW #Intelligence #DarkWeb #Spain