Actor Claims Krece Breach Exposed More Than Six Million Records
Summary
A threat actor reportedly claims that more than six million Krece records were exposed, including personal, financial, device and internal API data. The article does not independently confirm the alleged breach.
Key points
- The article reports an unverified claim that Krece, a Venezuelan financing and fintech app, suffered a data breach.
- According to the actor, the leak contains more than six million JSON records.
- Reportedly exposed data includes names, contact details, physical locations, national and tax ID numbers, and device IMEIs.
- The alleged records also include debts, payment histories, bank and account details, and transaction logs.
- Internal API keys and client IDs were reportedly included; the article provides no independent confirmation of the claim.
Article Details
- Victim Organization
- Krece
- Incident Type
- Alleged data breach and exposure of user and financial records
- Data Types Exposed
- Full names
- Email addresses
- Phone numbers
- Physical store locations and addresses
- National ID and tax identification numbers (RIF)
- Device IMEI numbers and smartphone models
- Financial transaction data, including debt amounts, payment histories, bank names, and account numbers
- Internal API keys and client IDs
- Affected Records
- The threat actor reportedly claimed the leak contains over six million records.
- Operational Impact
- The alleged exposure of user and financial data, including internal API keys and client IDs, could increase the risk of further system exploitation. No operational disruption is reported.
- Ransom Or Extortion
- Unknown
- Claim Status
- alleged