Threat Actor ‘MazingerZ’ Claims Breach of Ocaso Seguros’ Customer Data 

• Client information from Spanish insurance company Ocaso Seguros was allegedly exfiltrated in a cyberattack.
• The claim mentioned hackers gaining unauthorized access to a  CSV file containing over 800,000 rows.
• Stolen details include full names, addresses, IBANs, birth dates, account creation records, and testament-related data.

The Spanish insurance company Ocaso Seguros has reportedly become the latest target of a significant cyberattack, orchestrated by the threat actor using the alias MazingerZ, that resulted in the leak of sensitive customer data.

According to the claims of the June 2025 joiner of the breach forum, the attack successfully exfiltrated a CSV file containing over 800,000 rows.  

The compromised details allegedly include personally identifiable information (PII) such as full names, addresses, International Bank Account Numbers (IBANs), birth dates, account creation records, and testament-related data. 

It remains unclear whether the data breach resulted from common vulnerabilities, as MazingerZ has not provided sufficient technical details outlining the methods employed in the cyber attack. 

If proven accurate, the cybersecurity incident poses severe risks, including identity theft, fraudulent financial transactions, and further exploitation of personal and financial information. 

Ocaso Seguros has yet to issue an official statement confirming or denying the claims made by MazingerZ. Whether the company has already informed affected customers or regulatory authorities under Spain's data protection regulations remains undisclosed. 

Further updates from Ocaso Seguros or law enforcement authorities regarding the authenticity of the breach and ongoing investigations are expected to provide greater insight into the implications of this incident.

This month, United Natural Foods Inc. (UNFI) reported a significant cyberattack that disrupted its IT systems and operations, and Tata Consultancy Services said the attack that led to the Marks and Spencer data theft did not affect other company clients.