Belgium Consumer Database — 148,251 Records — Full PII + IBANs + DOB + Addresses — 81MB
About the leak
A Belgian consumer marketing database — 148,251 records — was found exposed. Full PII. No auth. No encryption. No protection. Every Belgian citizen who ever interacted with certain loyalty programs, subscription services, or consumer panels is in this database.
The data is structured, normalized, and complete. Names, genders, full postal addresses, phone numbers, email addresses, IBANs, BIC codes, and dates of birth. All linked. All real.
Inside: 148,251 unique Belgian records — 43,234 unique phone numbers, 52,688 unique email addresses, 40,455 unique IBANs, 22,022 unique postal codes covering every province in Belgium. 26,042 unique street names. 2,884 unique city names.
Date: 12.08.2026
Format: Full normalized CSV export (81MB raw) + deep PII extraction
Unique Phone Numbers: 43,234 (100% Belgian format — 04xx/09xx/02xx)
Unique Email Addresses: 52,688 (majority .be, .com, .nl)
Unique IBANs: 40,455 (BE xx xxxx xxxx xxxx — fully valid)
Unique Full Names: 148,251 (first + last, with titles)
Unique Postal Codes: 22,022 — all Belgian provinces
Unique Street Names: 26,042
Unique Cities: 2,884
Unique BIC Codes: 100+ — BEBA BE BB, KRED BE BB, GKCC BE BB, etc.
Gender Split: M, V, Dhr, Mevr, etc.
OrderUIDs Present: Yes — 132,000+ unique order identifiers
Compromised Data Includes
· bc_record_id — unique internal record ID
· geslacht — gender (M/V/Dhr/Mevr)
· achternaam — full last name
· voorletter — initials or first name
· tussenvoegsel — prefix (de, van, van den, etc.)
· straatnaam — street address
· huisnummer — house number
· toevoeging — apartment/box number
· postcode — Belgian postal code
· woonplaats — city/town
· telefoonnummer — primary phone number
· telefoonnummer2 — secondary phone number
· bestandcode — internal file code
· geboortedatum — date of birth (DD-MM-YYYY)
· rekeningnummer — account number (old format)
· iban — IBAN (BE xx xxxx xxxx xxxx)
· email — email address
· bic — BIC/SWIFT code
· abonnementsvorm — subscription type
· OrderUID — unique order identifier
Affected Entities
Unknown Belgian data broker / loyalty program operator
148,251 Belgian citizens — full identities
43,234 unique Belgian phone numbers — mobile + landline
52,688 unique email addresses — personal + business
40,455 unique IBANs — bank account numbers
100+ BIC codes — including BEBA BE BB, KRED BE BB, GKCC BE BB, GEBA BE BB
Every province in Belgium — from West-Vlaanderen to Luik
2,884 Belgian cities — from Antwerpen to Zoutleeuw
22,022 postal codes — full geographic coverage
Infrastructure Map
Production Database — EXPOSED — Full read
Host: Unknown
Company: Unknown Belgian data broker / marketing firm
Format: CSV — normalized, structured, complete
Top-level fields: 24 columns — full PII
Data flow: Consumer → Marketing Program → Data Aggregator → Exposed Database
Live Access Status (August 12, 2026)
Database read — FULLY EXPOSED (no auth, no encryption)
Download size: 81MB raw CSV
Sample Data — Belgian Citizens
Francine de Rycke | 092823395 | BE25890124203982 | [email protected] | Achiel cassimanstraat 35, 9800 Deinze | 09-03-1949
Ali Tekin | 0470244589 | BE31 0634 9654 3637 | [email protected] | vilainstraat 37 BUS 1, 9300 Aalst | 09-06-1975
Omer Arguden | 0471472802 | BE12 3456 7890 1234 | [email protected] | Koekoekstraat 9A, 1755 Gooik | 30-11-1966
R. Maas | 0471620055 | BE66 0634 0045 8875 | [email protected] | Constant permekestraat 4, 8020 Oostkamp | 05-05-1966
Rudi de Wit | 0472585353 | BE69 1030 2891 6778 | [email protected] | Oogstlaan 2, 1640 Sint-genesius-rode | 03-04-1960
Sample Data — IBANs (40,455 total)
BE25890124203982 · BE31 0634 9654 3637 · BE12 3456 7890 1234 · BE69 1030 2891 6778
BE94 0014 6259 6514 · BE58 8601 1188 9579 · BE70 7370 1549 8825 · BE72 7895 3031 8216
BE42 7331 5601 7254 · BE94 7380 1895 3014 · BE31 0634 6181 9055 · BE46 0630 8719 3436
BE31 7795 9986 9555 · BE80 3850 5950 1277 · BE87 6526 5096 8294 · BE67 1030 2334 0187
Sample Data — Belgian Service Centers / Businesses
Abonnement — subscription-based services
Bestandcode — internal marketing codes
BIC Codes: NICA BE BB, GEBA BE BB, KRED BE BB, GKCC BE BB, BEBA BE BB, etc.
What's in the Dump
· belgium_consumer_db.csv — complete normalized export (81MB)
· belgium_phone_numbers.txt — 43,234 unique Belgian numbers
· belgium_ibans.txt — 40,455 unique IBANs
· belgium_emails.txt — 52,688 unique email addresses
· belgium_full_pii.csv — names, addresses, DOB, IBAN, phone
Total: 81MB raw / 29MB compressed (.zip)
Final Word
This isn't a hack. This is a marketing database left on an open server. No password. No encryption. No firewall. Some company in Belgium stored 148,000 customer records — with bank account numbers, phone numbers, full addresses, and dates of birth — in a CSV file accessible to anyone who knew the URL.
Every person in this database is at risk:
· Phishing attacks with full personal details
· Bank fraud using IBANs
· Identity theft with DOB + address + phone
· Spear-phishing campaigns with purchase history
Belgium just had 148,000 citizens exposed. 40,000 bank accounts. 52,000 email addresses. Full names. Full addresses. Full birth dates.
This is a GDPR nuclear event.
Pentest Services Available
If you are looking for penetration testing and have targets to attack, we provide such services on the side. We use refined techniques with short turnaround times. Prices start from $2,000 and up, depending on the target and scope.
TELEGRAM https://t.me/VerifiedDraco1
About the leak
A Belgian consumer marketing database — 148,251 records — was found exposed. Full PII. No auth. No encryption. No protection. Every Belgian citizen who ever interacted with certain loyalty programs, subscription services, or consumer panels is in this database.
The data is structured, normalized, and complete. Names, genders, full postal addresses, phone numbers, email addresses, IBANs, BIC codes, and dates of birth. All linked. All real.
Inside: 148,251 unique Belgian records — 43,234 unique phone numbers, 52,688 unique email addresses, 40,455 unique IBANs, 22,022 unique postal codes covering every province in Belgium. 26,042 unique street names. 2,884 unique city names.
Date: 12.08.2026
Format: Full normalized CSV export (81MB raw) + deep PII extraction
Unique Phone Numbers: 43,234 (100% Belgian format — 04xx/09xx/02xx)
Unique Email Addresses: 52,688 (majority .be, .com, .nl)
Unique IBANs: 40,455 (BE xx xxxx xxxx xxxx — fully valid)
Unique Full Names: 148,251 (first + last, with titles)
Unique Postal Codes: 22,022 — all Belgian provinces
Unique Street Names: 26,042
Unique Cities: 2,884
Unique BIC Codes: 100+ — BEBA BE BB, KRED BE BB, GKCC BE BB, etc.
Gender Split: M, V, Dhr, Mevr, etc.
OrderUIDs Present: Yes — 132,000+ unique order identifiers
Compromised Data Includes
· bc_record_id — unique internal record ID
· geslacht — gender (M/V/Dhr/Mevr)
· achternaam — full last name
· voorletter — initials or first name
· tussenvoegsel — prefix (de, van, van den, etc.)
· straatnaam — street address
· huisnummer — house number
· toevoeging — apartment/box number
· postcode — Belgian postal code
· woonplaats — city/town
· telefoonnummer — primary phone number
· telefoonnummer2 — secondary phone number
· bestandcode — internal file code
· geboortedatum — date of birth (DD-MM-YYYY)
· rekeningnummer — account number (old format)
· iban — IBAN (BE xx xxxx xxxx xxxx)
· email — email address
· bic — BIC/SWIFT code
· abonnementsvorm — subscription type
· OrderUID — unique order identifier
Affected Entities
Unknown Belgian data broker / loyalty program operator
148,251 Belgian citizens — full identities
43,234 unique Belgian phone numbers — mobile + landline
52,688 unique email addresses — personal + business
40,455 unique IBANs — bank account numbers
100+ BIC codes — including BEBA BE BB, KRED BE BB, GKCC BE BB, GEBA BE BB
Every province in Belgium — from West-Vlaanderen to Luik
2,884 Belgian cities — from Antwerpen to Zoutleeuw
22,022 postal codes — full geographic coverage
Infrastructure Map
Production Database — EXPOSED — Full read
Host: Unknown
Company: Unknown Belgian data broker / marketing firm
Format: CSV — normalized, structured, complete
Top-level fields: 24 columns — full PII
Data flow: Consumer → Marketing Program → Data Aggregator → Exposed Database
Live Access Status (August 12, 2026)
Database read — FULLY EXPOSED (no auth, no encryption)
Download size: 81MB raw CSV
Sample Data — Belgian Citizens
Francine de Rycke | 092823395 | BE25890124203982 | [email protected] | Achiel cassimanstraat 35, 9800 Deinze | 09-03-1949
Ali Tekin | 0470244589 | BE31 0634 9654 3637 | [email protected] | vilainstraat 37 BUS 1, 9300 Aalst | 09-06-1975
Omer Arguden | 0471472802 | BE12 3456 7890 1234 | [email protected] | Koekoekstraat 9A, 1755 Gooik | 30-11-1966
R. Maas | 0471620055 | BE66 0634 0045 8875 | [email protected] | Constant permekestraat 4, 8020 Oostkamp | 05-05-1966
Rudi de Wit | 0472585353 | BE69 1030 2891 6778 | [email protected] | Oogstlaan 2, 1640 Sint-genesius-rode | 03-04-1960
Sample Data — IBANs (40,455 total)
BE25890124203982 · BE31 0634 9654 3637 · BE12 3456 7890 1234 · BE69 1030 2891 6778
BE94 0014 6259 6514 · BE58 8601 1188 9579 · BE70 7370 1549 8825 · BE72 7895 3031 8216
BE42 7331 5601 7254 · BE94 7380 1895 3014 · BE31 0634 6181 9055 · BE46 0630 8719 3436
BE31 7795 9986 9555 · BE80 3850 5950 1277 · BE87 6526 5096 8294 · BE67 1030 2334 0187
Sample Data — Belgian Service Centers / Businesses
Abonnement — subscription-based services
Bestandcode — internal marketing codes
BIC Codes: NICA BE BB, GEBA BE BB, KRED BE BB, GKCC BE BB, BEBA BE BB, etc.
What's in the Dump
· belgium_consumer_db.csv — complete normalized export (81MB)
· belgium_phone_numbers.txt — 43,234 unique Belgian numbers
· belgium_ibans.txt — 40,455 unique IBANs
· belgium_emails.txt — 52,688 unique email addresses
· belgium_full_pii.csv — names, addresses, DOB, IBAN, phone
Total: 81MB raw / 29MB compressed (.zip)
Final Word
This isn't a hack. This is a marketing database left on an open server. No password. No encryption. No firewall. Some company in Belgium stored 148,000 customer records — with bank account numbers, phone numbers, full addresses, and dates of birth — in a CSV file accessible to anyone who knew the URL.
Every person in this database is at risk:
· Phishing attacks with full personal details
· Bank fraud using IBANs
· Identity theft with DOB + address + phone
· Spear-phishing campaigns with purchase history
Belgium just had 148,000 citizens exposed. 40,000 bank accounts. 52,000 email addresses. Full names. Full addresses. Full birth dates.
This is a GDPR nuclear event.
Pentest Services Available
If you are looking for penetration testing and have targets to attack, we provide such services on the side. We use refined techniques with short turnaround times. Prices start from $2,000 and up, depending on the target and scope.
TELEGRAM https://t.me/VerifiedDraco1
