PcComponentes
Disclosed Jan 21, 2026Confirmed
PcComponentes denies database breach but confirms credential stuffing attack
Spanish electronics retailer PcComponentes rejected a claim that 16.3 million customer records were stolen from its databases, but confirmed a credential stuffing attack against accounts using passwords leaked elsewhere. Accessed accounts exposed order details, addresses, phone numbers and support messages.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Jan 21, 2026 |
| Attack | Credential stuffing |
| Data exposed | NamesAddressesPhone numbersIP addressesMessagesOther |
| Sector | Retail · ES |
| Status | Confirmed |
Sources
Notices filed
History of this record
First recordedby seedSource
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.