2026 Jeroid — burti leak claim (unverified); 312k users, BVN/NIN/KYC and wallet data alleged
Data compromised
Actor-claimed 312,433 users (emails, phones), 759,900 wallet records (129,423 with balances), 110,282 BVNs, 64,300 NINs, 70,956 face verification photos, 3,872 passports, 2,106 voter cards, 1,700 driver's licenses, and full Level-3 KYC for 65,013 users—unverified
Technical writeup
Unverified leak-site / forum claim — June 26, 2026. Threat-intelligence reporting documents actor burti advertising a dataset allegedly tied to Jeroid (jeroid.co), a Nigeria crypto-to-Naira exchange, including 312,433 user accounts and 759,900 wallet records offered for free download. The actor claims exposure of Bank Verification Numbers (BVN), National Identification Numbers (NIN), passport and voter-card images, driver's licenses, face-verification selfies, and wallet balances for 129,423 wallets—creating acute downstream fraud risk because BVNs anchor Nigeria's financial identity layer beyond the exchange itself. Earlier June 2026 posts by the same actor alleged weak KYC controls and publicly accessible S3 storage for verification photos. Jeroid had not publicly confirmed the breach at catalog time. BreachHistory indexes the actor-cited 312,433 user count as unverified.
Root cause
Unverified forum claim by actor burti alleging full Jeroid user, wallet, and KYC database exposure—including BVN/NIN, passport/voter/DL images, and face verification photos; offered free online June 26, 2026