TheSyndicate Claims Nayax Breach, Threatens Release of 100TB of Data
Summary
TheSyndicate claims it accessed Nayax systems for nearly a year and stole 100TB, including over 1 billion card records, KYC data and credentials. It threatens a July 21 release; the claim is unverified and no data has been publicly released.
Key points
- TheSyndicate alleges it had access to Nayax systems for nearly a year.
- The actor claims to have exfiltrated over 100TB of data, including more than 1 billion card records and KYC data.
- Other allegedly stolen material includes API keys, credentials, source code and infrastructure maps.
- The actor threatens to release the data on July 21.
- The claims are unverified, and no data has been publicly released.
Article Details
- Victim Organization
- Nayax
- Incident Type
- TheSyndicate claims to have fully compromised Nayax systems and exfiltrated data.
- Data Types Exposed
- Payment card records
- KYC data
- Internal API keys and credentials
- Source code
- Infrastructure maps
- Affected Records
- TheSyndicate claims the data includes more than 1 billion card records; this is unverified.
- Affected Data Size
- TheSyndicate claims more than 100TB of data was exfiltrated; this is unverified.
- Operational Impact
- The actor claims full access to Nayax systems for nearly a year. No operational disruption is reported, and no data has yet been publicly released.
- Ransom Or Extortion
- TheSyndicate threatens to release the alleged data, with a release reportedly scheduled for July 21. No ransom demand is reported, and the claim remains unverified.
- Claim Status
- claimed