PCComponentes data breach exposes 16.3 million user accounts in Spain
A massive PCComponentes data breach has exposed 16.3 million accounts with national ID numbers, addresses and phone numbers. Find out which of your data is at risk and what to do now.
English · Original discussion in Spanish · Published
16.3 million PCComponentes accounts: which of your data is now out in the open
Last January, PCComponentes, Spain's largest technology retailer, suffered a massive data breach affecting more than 16.3 million accounts. And we're not just talking about email addresses and passwords: full names, national ID numbers (DNI), postal addresses, phone numbers and dates of birth have all been exposed. The company initially denied it on social media, but the evidence points to a very real leak of colossal proportions. To make matters worse, this isn't the first time: internal sources indicate that a 2GB CSV file with similar data sat accessible in the cloud for five years without anyone noticing.
The scale of the breach: much more than an email address
According to the leaked information, cybercriminals gained access to a database that includes highly sensitive fields such as national ID numbers, full addresses and mobile phone numbers. This opens the door to identity theft, phone scams and personalized embeleco digital attacks. Although PCComponentes claims that banking details were not compromised — and that passwords were "adequately protected" — no user should rest easy. The risk isn't just financial: with this data, anyone can impersonate you with telecom operators, government agencies or financial institutions.
PCComponentes' response: denial and silence
The most worrying part has been the company's reaction. First, an official statement denying the hack. Then, administrative silence. They have not contacted those affected on a mass scale, as required by data protection regulations (GDPR). The law states that any security breach must be reported to users within 72 hours, but so far, many victims have only found out through the media or forums. The question is: how long was the database exposed before it became public knowledge? The shadow of the earlier incident — a 2GB CSV file forgotten in the cloud for five years — does not reflect well on the company.
What to do if you have a PCComponentes account
First of all, don't wait for the company to notify you. Change your account password immediately, and if you used the same one on other services, change it there too. Enable two-factor authentication wherever possible. Scrutinize your bank statements closely, even if your card wasn't directly linked: personal data is enough to attempt social engineering scams. Consider unsubscribing from services you don't use and, for future sign-ups, use email aliases and disposable phone numbers.
The PCComponentes breach is a brutal wake-up call about how companies handle our data. They store sensitive information for years purely for commercial convenience, without even minimal security guarantees. While those affected try to protect their identities, the company stays silent and regulators do nothing. The question left hanging in the air is: how much is your ID really worth on the black market? And most importantly, who answers for it when everything goes up in flames?
Related discussions in the forum
Last January, PCComponentes, Spain's largest technology retailer, suffered a massive data breach affecting more than 16.3 million accounts. And we're not just talking about email addresses and passwords: full names, national ID numbers (DNI), postal addresses, phone numbers and dates of birth have all been exposed. The company initially denied it on social media, but the evidence points to a very real leak of colossal proportions. To make matters worse, this isn't the first time: internal sources indicate that a 2GB CSV file with similar data sat accessible in the cloud for five years without anyone noticing.
The scale of the breach: much more than an email address
According to the leaked information, cybercriminals gained access to a database that includes highly sensitive fields such as national ID numbers, full addresses and mobile phone numbers. This opens the door to identity theft, phone scams and personalized embeleco digital attacks. Although PCComponentes claims that banking details were not compromised — and that passwords were "adequately protected" — no user should rest easy. The risk isn't just financial: with this data, anyone can impersonate you with telecom operators, government agencies or financial institutions.
PCComponentes' response: denial and silence
The most worrying part has been the company's reaction. First, an official statement denying the hack. Then, administrative silence. They have not contacted those affected on a mass scale, as required by data protection regulations (GDPR). The law states that any security breach must be reported to users within 72 hours, but so far, many victims have only found out through the media or forums. The question is: how long was the database exposed before it became public knowledge? The shadow of the earlier incident — a 2GB CSV file forgotten in the cloud for five years — does not reflect well on the company.
What to do if you have a PCComponentes account
First of all, don't wait for the company to notify you. Change your account password immediately, and if you used the same one on other services, change it there too. Enable two-factor authentication wherever possible. Scrutinize your bank statements closely, even if your card wasn't directly linked: personal data is enough to attempt social engineering scams. Consider unsubscribing from services you don't use and, for future sign-ups, use email aliases and disposable phone numbers.
The PCComponentes breach is a brutal wake-up call about how companies handle our data. They store sensitive information for years purely for commercial convenience, without even minimal security guarantees. While those affected try to protect their identities, the company stays silent and regulators do nothing. The question left hanging in the air is: how much is your ID really worth on the black market? And most importantly, who answers for it when everything goes up in flames?
Related discussions in the forum
- I'm fat, I weigh 90kg, and I'm going to start going to the gym 3 days a week at 6am · 129 replies
- Mercedes-Benz S680 Guard 2026 unveiling: 4,500 kg of armored German TANK! · 12 replies
- This electric car is the perfect brother-in-law silencer · 129 replies
- Organic cosmetics, natural cleaning and kombucha: real alternatives to conventional consumption · 17 replies
Also available in: Deutsch
Summary of a discussion on Burbuja.info - Foro de economía, actualidad y política., translated from Spanish and reviewed before publication. Read the full discussion (99 replies).
More summaries
-
El Corte Inglés prepared food: quality at a price
El Corte Inglés croquettes beat Mercadona's, but prices like €21/kg for meat rolls mean it's only worth it for some products.
-
Beef is 60% more expensive than in 2021: the new normal
Sirloin steak at €22/kg and beef up 60% since 2021: this is how the bill at the butcher's shop is becoming the norm.
-
Low-cost petrol stations: the water myth and the additives war
A driver spent a fortune on garages until he changed petrol stations: the warning light went off on its own. Is cheap fuel a myth or reality?
-
Torrent platforms go down: content control or technical failure?
Torrent platforms are experiencing outages. We look at domain volatility and the alternatives for digital downloads.
-
Encyclopedias that cost 250,000 pesetas and that nobody wants to buy today
A user says a Carroggio encyclopedia cost him 250,000 pesetas. The forum debates whether to sell it, donate it, keep it or recycle it.
-
Mazda: from Skyactiv enthusiasm to a fight over vibrations
Mazda wins buyers over with design and naturally aspirated engines and record figures, but owners point to an after-sales service that blames every breakdown on the driver.