Alleged breach of Hacendado via 0-day in third-party vendor – 27M User Records Exposed

⚠ Disclaimer
This report includes actual screenshots and/or text that may include unredacted personally identifiable information (PII) gathered from publicly available sources. The sensitive information presented within this report is intended solely for cybersecurity awareness and threat intelligence purposes. Dark Web Informer explicitly condemns unauthorized access, distribution, or misuse of the personal data displayed or referenced here. Users must treat exposed data responsibly and ethically.

📌 Overview

Threat actor WhiteCoat claims to have exploited a zero-day vulnerability in a third-party logistics and inventory management system that was integrated with the backend infrastructure of Hacendado, a private-label brand operated by Mercadona, a major Spanish supermarket chain. The actor states that this led to unrestricted access to internal databases containing sensitive customer and employee data.

📊 Key Details