Actor Claims Credix Customer Data Breach Exposed 44,548 Records
Summary
An unidentified actor claims to have exploited an unpatched vulnerability in Credix, exfiltrating 44,548 customer records and possessing ID-card photos. The breach and data claims are unverified.
Key points
- An unidentified actor claims an unpatched vulnerability in Credix was exploited; the article does not independently verify the breach.
- The actor claims to have exfiltrated 44,548 customer records.
- Reported data includes names, national ID numbers, birth dates, physical addresses, employment details and estimated income.
- The claimed records also include account metadata and verification tokens.
- The actor claims to possess Base64-encoded ID-card photos but says they were withheld from the public sample.
Article Details
- Victim Organization
- Credix, operated by Fibextelecom
- Incident Type
- Alleged exploitation of an unpatched vulnerability and exfiltration of customer data
- Data Types Exposed
- Full names
- National identification numbers
- Dates of birth
- Physical addresses
- Employment and professional details
- Estimated income
- Client status
- Account metadata, including verification tokens and creation/update logs
- Photographs of identification cards (claimed to be held by the actor; withheld from the public sample)
- Affected Records
- 44,548 rows, according to the unidentified actor's claim
- Claim Status
- claimed