2026 Cashea (Venezuela) — forum marketing of ~79M BNPL transaction rows; corporate confirmation pending
Data compromised
Alleged transaction logs, merchant profiles, and store configuration or banking references per forum and intel summaries
Technical writeup
In February 2026, dark-web summaries and social threat-intel posts said a BreachForums actor (often named as “malconguerra2”) circulated a large JSON dump marketed as Cashea, a Venezuelan buy-now-pay-later app, alleging roughly 79 million transaction-history rows (~46.5 GB compressed alongside merchant and storefront tables). Analyst write-ups noted comparable figures for store and merchant tables. Cashea had not issued a matching public breach confirmation in indexed materials reviewed for this entry. Treat counts and field-level claims as criminal marketing until independently verified.
Root cause
Unverified database exfiltration / insider or external intrusion (not publicly confirmed by operator)