> ## Content Index
> Fetch the complete content index at: https://darkwebinformer.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Threat Actor Claims to Sell a 110 GB Iberdrola Customer Database Affecting 7 Million Customers
- URL: https://darkwebinformer.com/threat-actor-claims-to-sell-a-110-gb-iberdrola-customer-database-affecting-7-million-customers/
- Published: 2026-06-02T15:31:58.000Z
- Updated: 2026-06-02T15:31:58.000Z
- Author: Dark Web Informer
- Tags: Data Breaches

Breach Report ![Spain flag](https://flagcdn.com/w40/es.png)Spain Energy 

# Threat Actor Claims to Sell a 110 GB Iberdrola Customer Database Affecting 7 Million Customers

A threat actor using the alias **spain** claims to be selling a **109.79 GB** customer database stolen from **Iberdrola**, one of the world's largest electricity utilities, and lists the domain **iberdrola.es**. The post advertises data on **more than 7 million customers**, including banking (IBAN), national ID, and contact details, with a small sample and a Telegram contact for buyers. The intrusion is attributed in the post to "RP" and is **unverified**; Iberdrola has not publicly addressed it.

Severity CRITICAL 

Data7M customers / 110 GB

PriceTelegram sale

Country![Spain flag](https://flagcdn.com/w40/es.png)Spain

Actorspain

## ▣Post details

TargetIberdrola (iberdrola.es)

Country![Spain flag](https://flagcdn.com/w40/es.png)Spain

SectorEnergy / Electric Utility

ClaimCustomer database offered for sale

Data\~7M customer records, 109.79 GB

ObservedJun 1, 2026

PriceTelegram sale

Actorspain (claims hacked by "RP")

## !Allegedly exposed

- 7M+ customer records (claimed)
- Customer names & account IDs
- IBAN bank account numbers
- National IDs (DNI / NIF / CIF)
- Email addresses & phone numbers
- Addresses (city, province, ZIP)
- Tariff, contract & power (potencia) data
- Billing & purchase totals
- Supply-point identifiers (CUPS)
- Customer photos & call records

## ␱Screenshot

[ ![Iberdrola Spain alleged data leak Screenshot 1](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/06/2397586238975698723649876325498721-1.png) Screenshot 1 Redacted preview ](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/06/2397586238975698723649876325498721-1.png) 

## ⚠Potential impact

If genuine, a dataset of **7 million customers** containing IBAN bank details, national IDs (DNI/NIF/CIF), emails, phone numbers, and addresses would be highly valuable for financial fraud, phishing, and identity theft at scale across Spain. Energy-account and supply-point details could also enable convincing, targeted scams against utility customers. As with any large "for sale" listing, the figures may be inflated or partly recycled from earlier breaches.

## iStatus

Unverified 

A sample and a full column listing were posted to an underground forum, with the full dataset offered via a Telegram contact and escrow; the sample links, password, and contact identifiers are not reproduced here. The claim has **not been independently confirmed** and Iberdrola has not publicly addressed it.

Want the non-redacted screenshots? **Paid subscribers** get all of the claim details and unredacted screenshots, check out the [threat feed](https://darkwebinformer.com/threat-feed/) or [ransomware feed](https://darkwebinformer.com/ransomware-feed/). [View pricing →](https://darkwebinformer.com/pricing) 

[DARK WEB INFORMER](https://darkwebinformer.com/) \- THREAT INTELLIGENCE