Reports suggest a data breach may have affected Scalextric.es, the official Spanish online retailer for Scalextric, with an alleged exposure of 100,000 customer records in 2025. A threat actor is reportedly listing a database for sale on a cybercrime forum, claiming it originated from the company's Spanish platform. The incident has not been officially confirmed by Scalextric.es.
The alleged breach may have involved full names, email addresses, hashed passwords (bcrypt), physical addresses (street, city, zip code), phone numbers (mobile and landline), National Identity Numbers (DNI), company names and VAT numbers (for business clients), IP addresses, customer support messages, and order notes. The number of affected individuals is estimated at 100,000, though this remains unconfirmed. It is unclear if financial data or medical data were exposed.
Details surrounding this potential incident may emerge later, and official notices can be delayed.