2026 Banco Falabella (Colombia) — Conalcréditos / collections vendor leak; 7M+ records claimed (Apr)
Data compromised
Names, national IDs, phones, debt and collection notes per OSINT—exact scope varies
Technical writeup
In late April 2026, cyber-intelligence social monitoring described a large tranche of customer and debt-collection–oriented data tied to Banco Falabella’s Colombia operations and third-party collections / portfolio partners (e.g., Conalcréditos / Emergiacc narratives in actor posts). Summaries cited national ID numbers, phone and WhatsApp-oriented contact metadata, outstanding balances, and internal notes, with warnings about fraud and extortion follow-on. Treat multi-million row figures and vendor attribution as forum-led pending bank and supervisory statements.
Root cause
Third-party / collections ecosystem exposure alleged; criminal forum distribution