Alleged Data Sale of Telefónica

🏢 About Telefónica

Telefónica, S.A. is a Spanish multinational telecommunications company headquartered in Madrid. It is one of the world’s largest telephone operators and mobile network providers, offering services across Europe and Latin America.

⚠ Disclaimer

This report includes actual screenshots and/or text that may include unredacted personally identifiable information (PII) gathered from publicly available sources.
The sensitive information presented within this report is intended solely for cybersecurity awareness and threat intelligence purposes.

📌 Overview

On August 20, 2025, a threat actor using the alias Zmata claimed responsibility for selling a Telefónica dataset of approximately 106 GB on a dark web marketplace.

The actor states the breach occurred on May 30, 2025, due to a Jira misconfiguration. During 12 uninterrupted hours of access, the actor allegedly exfiltrated 385,311 files, totaling over 106 GB of sensitive data.

The dataset reportedly contains customer identities, employee information, internal communications, source code, HR records, invoices, contracts, and confidential corporate documents.

📊 Key Details