2026 Addi — ShinyHunters fintech claim; XON census 25.93M (unverified)
Data compromised
XON/actor fields (unverified): emails, names, government IDs, IPs, phones, physical addresses, purchases — 25,934,104 in XposedOrNot H1 census (earlier trade claims cited ~16M)
Technical writeup
Unverified leak-site / extortion claim — Addi (Colombia BNPL/fintech) listed in ShinyHunters-related reporting. Catalog previously used a ~16M actor figure; XposedOrNot H1 2026 indexes Addi at 25,934,104 records (emails, names, government IDs, IPs, phones, addresses, purchases; added May 31, 2026). Company confirmation of either census not established at update time. recordsAffected updated to 25934104 (unverified); companyConfirmed false.
Root cause
Unverified ShinyHunters / actor claim of Addi (Colombia fintech) data theft