Those responsible for the cyberattack are Babuk, and according to what elconfidencial has learned, the attackers have a large amount of data from the Spanish company, employees and customers.
Among the data currently in the possession of cybercriminals would include the full name of the clients, date of birth, ID, bank account, mobile phone, email, home address and company where they work. This is more than enough data to carry out social engineering in the future and access much more sensitive data.
Cybercriminals claim they have 10 databases containing private information of more than 3 million customers and employees of the Spanish division of Phone House.
They threaten that, if the company does not pay, all this information will be published in a public blog and darkweb forums, and on top of that the data will be sent to competitors.