Online retailer PcComponentes says data breach claims are fake

PcComponentes says it found no unauthorized access to internal systems after a threat actor claimed to have stolen 16.3M customer records and leaked 500k entries; the company confirmed a credential-stuffing attack likely powered by credentials harvested via infostealer malware and has enforced CAPTCHA, mandatory 2FA, and session invalidation while recommending password hygiene.