2026 HerbaSis — DarkMafiaX forum claim; CPF + medical conditions (unverified; no count)
Data compromised
Actor-claimed (unverified): customer CRM with CPF national IDs, DOB, full home addresses, weight/height, plain-text illness field (e.g. diabetes, hypertension, heart disease, depression, arthritis), orders/appointments. No record count published — recordsAffected 0.
Technical writeup
Unverified forum dump claim — Dark Web Informer reported August 11, 2026 that actor DarkMafiaX published what they described as the HerbaSis database, a Brazilian SaaS used by independent nutrition consultants. Schema/samples allegedly pair CPF national IDs, dates of birth, home addresses, weight/height, and a plain-text illness field with named individuals. DWI marked unverified; no record count was stated; HerbaSis had not publicly addressed the listing. BreachHistory labels the row unverified with recordsAffected 0 pending any census.
Root cause
Unverified underground forum claim by actor DarkMafiaX advertising alleged HerbaSis nutrition-consultant CRM database — company had not confirmed at indexing time.