Data Breach Overview
A data breach allegedly impacting MX Zambrana, a Spanish off-road and motorcycle equipment retailer, was leaked in October 2025 by user “frog” on LeakBase.la. The exposed dataset includes sensitive personal and order-related information from approximately 25,000 users.

Where Was the Data Found?
The leaked database was distributed in CSV format and is circulating on underground breach forums. It includes the following data:

• Full names

• Password hashes (14,000 in MD5, 9,000 in bcrypt)

• Order details: name, address, phone number, and DNI (Spanish national ID number)

The presence of MD5-hashed passwords makes many user accounts vulnerable to cracking and unauthorized access.

A Screenshot of the data can be found below:

Company Data Breach History
MX Zambrana has been operating since 1989 as an authorized dealer of brands like Husqvarna, Kawasaki, and Fantic. No prior data breaches have been publicly reported before this incident.

Impact and Risks
The leaked information could be used for:

• Phishing and social engineering using names, addresses, and DNI numbers

• Account takeover, especially for users with weak or reused passwords

• Identity theft due to the inclusion of national ID data

• Fraudulent purchases or impersonation

Users with MD5-hashed passwords are particularly at risk due to the algorithm’s known vulnerabilities.

Recommendations for Users

• Change your password immediately, especially if reused elsewhere

• Use strong, unique passwords for each service

• Enable two-factor authentication (2FA) wherever possible

• Watch for phishing attempts or suspicious activity on your accounts

• Consider monitoring your identity and financial activity for misuse

What is InsecureWeb?

InsecureWeb is a Dark Web monitoring service that keeps track of recent data breaches and tracks their impact by monitoring the darkest places of the internet.

Our commitment lies in providing top-notch cybersecurity services to our clients. Through continuous monitoring of the dark web and advanced threat detection methodologies, we strive to identify potential breaches promptly, enabling swift response and mitigation efforts. With our state-of-the-art tools and expertise, we prioritize the confidentiality, integrity, and availability of our clients’ data.