Dark Web Informer reports a seller is advertising 80 GB of Spanish residents’ records

Dark Web Informer, an X account that tracks cybercrime, says an actor using the handle “spain” is advertising an 80 GB database of personal information on 46.3 million residents of Spain. In its 13 November post, it says the dataset reportedly includes full names, national ID numbers, dates of birth, home addresses, nationalities and census registration information, with sample records published and the full database offered for sale.

The account labels the claim unverified and says the source and authenticity of the data are unclear.

Spain’s population database allegedly leaked, 46.3 million residents potentially exposed. An actor using the handle "spain" is advertising an 80 GB database allegedly containing personal information on 46.3 million residents of Spain. Sample records have been published, with the complete database offered for sale. The source and authenticity of the data remain unclear. Claim is currently unverified.

— Dark Web Informer (@DarkWebInformer) November 13, 2026

What the seller says is inside

The listing was first reported a day earlier. On 12 November, DailyDarkWeb, an account that monitors dark web forums, said a seller was advertising what they call Spanish census and municipal population register (padrón) data and had posted sample records. The seller claims the data includes full names and DNI or NIE identity numbers, dates of birth, nationality and sex, registered home addresses and registration dates, and histories of address changes, registrations and removals.

DailyDarkWeb says that first listing gave no record count, price or explanation of how the data was obtained. The 80 GB and 46.3 million figures appear in Dark Web Informer’s later post.

SPAIN: SELLER ADVERTISES ALLEGED CENSUS AND MUNICIPAL REGISTRY DATA WITH DNI/NIE NUMBERS. A threat actor on a dark web forum is advertising what they call Spanish census and municipal population register (padrón) data, and has posted sample records.

— Dark Web Intelligence (@DailyDarkWeb) November 12, 2026

The padrón is the municipal register of residents. Spain’s national statistics institute, INE, says everyone living in Spain must register in the padrón of the municipality where they live, and that its mandatory fields are name and surnames, sex, address, nationality, place and date of birth, and DNI or the equivalent document for foreigners. Town councils keep the register, and INE holds a base that combines every municipal padrón and updates monthly.

How 46.3 million compares with the official count

INE put Spain’s population at 49,935,642 on 1 October 2026, in its quarterly estimate published on 12 November. INE says that statistic is based mainly on administrative data, chiefly the continuous padrón. The listing’s 46.3 million residents is about 3.6 million fewer than INE’s count, and neither account says why.

What’s confirmed

DailyDarkWeb calls the listing an unverified threat-actor claim, “NOT confirmation of a breach”, and says the data may be aggregated or old. It adds that if the records are genuine, names, ID numbers and addresses would enable identity fraud and convincing scams against Spanish residents. Neither post cites a statement from Spanish authorities, links to the listing, or says anyone checked the samples.

A similar claim in January

A comparable claim has already been denied. On 31 January, a forum seller using the name HaciendaSec listed a database of about 47.3 million records attributed to Spain’s Ministry of Hacienda, Spanish tech site El Chapuzas Informático reported on 2 February. The ministry later said it found no trace of any cyberattack that caused data theft, its press office told fact-checker Verificat, which published on 6 February.

The November listing comes from a different seller handle, and the 46.3 million figure is that seller’s claim.