Unverified claim — May 28, 2026: Dark Web Informer reported actor bacen running a pay-or-leak listing against iFood, citing about 43.8 million customer records with CPF, contact fields, and credit-card data. iFood has not confirmed this dump.
Keep it separate from iFood's confirmed ~1.2 million-user incident (Dec 2025 / disclosed June 2026). Mega-claims often recycle or inflate.
What to do
- Rotate your iFood password; enable MFA if offered.
- Monitor CPF/credit activity for fraud.
- Canonical record: iFood bacen claim on BreachHistory.
Source: Dark Web Informer.