Actor Allegedly Offers 243 Million Records Attributed to Brazil’s Credilink
Summary
A threat actor identified as Blastoize is allegedly selling 243 million records attributed to Brazilian credit provider Credilink. The reported data includes CPF IDs, addresses, vehicle ownership and presumed income; a 12 million-record sample is offered free.
Key points
- Blastoize is reportedly offering a dataset attributed to Credilink; the alleged sale is not independently confirmed in the supplied content.
- The dataset is claimed to contain 243 million records from Brazil.
- Reported fields include CPF national IDs, names, addresses, birth dates, vehicle ownership and presumed income.
- A 12 million-record sample is reportedly available for free download.
Article Details
- Victim Organization
- Credilink
- Victim Domain
- credilink.com.br
- Incident Type
- Alleged data breach and sale of a dataset
- Data Types Exposed
- CPF national IDs
- Names
- Addresses
- Birth dates
- Vehicle ownership
- Presumed income
- Affected Records
- 243 million records reportedly in the dataset; a 12 million record sample was reportedly offered for free download.
- Ransom Or Extortion
- The dataset was allegedly offered for sale; no ransom demand or extortion activity was reported.
- Claim Status
- alleged