2026 B9 (bnine.com) — riche PwnForums 36K user dump claim (unverified)
Data compromised
Actor-claimed ~36,000 user records (from alleged ~3M account universe): names, phones, emails, DOB, full addresses, user IDs, account status, credit/advance limits, KYC status, SSN last digits — unverified
Technical writeup
Unverified fintech leak claim — July 23, 2026. VECERTRadar reported threat actor “riche” posted on PwnForums alleging compromise of U.S. paycheck-advance / digital-account platform B9 (bnine.com), advertising an initial batch of about 36,000 user records from a claimed larger population near 3 million accounts. Alleged fields include names, phones, emails, dates of birth, residential addresses, account/KYC status, advance limits, and SSN fragments. Status unconfirmed; authenticity under assessment per the monitor. B9 had not issued a matching public breach confirmation in sources reviewed. BreachHistory indexes 36,000 per the actor batch claim, labeled unverified.
Root cause
Unverified underground forum claim by actor “riche” alleging partial extraction of B9 neobank user records posted on PwnForums — B9 had not confirmed at indexing time