> ## Content Index
> Fetch the complete content index at: https://darkwebinformer.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Ícaro Cloud Allegedly Breached: Firewall Configs, VPN Keys, TLS Certificates, and Internal Network Data Exposed Across 20 Spanish Corporate Networks
- URL: https://darkwebinformer.com/icaro-cloud-allegedly-breached-firewall-configs-vpn-keys-tls-certificates-and-internal-network-data-exposed-across-20-spanish-corporate-networks/
- Published: 2026-05-15T17:18:52.000Z
- Updated: 2026-05-15T17:18:52.000Z
- Author: Dark Web Informer
- Tags: Data Breaches

Breach Report · Spain

# Ícaro Cloud Allegedly Breached: Firewall Configs, VPN Keys, TLS Certificates, and Internal Network Data Exposed Across 20 Spanish Corporate Networks

A threat actor claims to have breached Ícaro Cloud S.L., an Alicante-based managed service provider in Spain, allegedly exposing sensitive configuration data across 20 client networks. The actor alleges the exposed material includes firewall backups, VPN-related secrets, TLS certificates, administrator hashes, plaintext passwords, VLAN maps, and historical network data.

Post details

Actormacaroni

SectorManaged Service Provider / Corporate IT / Network Security

TypeData Breach

Records20 corporate networks and 3,500+ OPNsense configuration backups

CountrySpain 

Date15/05/2026

Compromised data

- Firewall configuration backups allegedly linked to Ícaro Cloud-managed client networks
- VPN-related key material and TLS certificate data
- Administrator hashes and plaintext password references
- VLAN maps and internal network segmentation details
- Historical configuration archives spanning multiple client environments
- Client network records allegedly affecting organizations across accounting, education, IT services, chemicals, hospitality, real estate, transport, healthcare, and manufacturing sectors

The actor claims the exposed material was obtained from reused MSP credentials and is being offered for sale through underground channels.

Screenshots

[ ![Screenshot 1](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/05/237857823659872356879236598723657983.png) Screenshot 1 ](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/05/237857823659872356879236598723657983.png) [ ![Screenshot 2](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/05/237857823659872356879236598723657984.png) Screenshot 2 ](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/05/237857823659872356879236598723657984.png) 

Stop guessing what's redacted. Subscribers see everything → [darkwebinformer.com/pricing](https://darkwebinformer.com/pricing)