2026 PagBank — forum transaction-database claim; 812k+ rows cited (unverified)
Data compromised
Threat-intel reporting cites actor-claimed transaction records including merchant names, amounts, payment types, last four digits of payment cards, and authorization codes; separate forum marketing alleged 250k merchants and 1B historical transactions—unverified and likely inflated
Technical writeup
Unverified criminal-forum claim — observed July 12, 2026. DailyDarkWeb documented a threat actor claiming unauthorized access to PagBank, one of Brazil's largest payment service providers, alleging compromise of core infrastructure, 250,000+ active merchants, and more than one billion historical transaction records with merchant settlement metadata and POS terminal identifiers—marketing language without independent sample verification at report time. Separately, VenariX cited a forum database allegedly linked to PagBank containing more than 812,000 transaction rows with merchant names, amounts, payment types, card last-four digits, and authorization codes. PagBank had not issued a matching public breach confirmation at indexing time. BreachHistory indexes recordsAffected 812,000 from the more specific transaction-row citation, labeled unverified, while noting larger unverified actor marketing figures.
Root cause
Unverified cybercrime-forum listing alleging PagBank payment transaction data circulating online—PagBank had not confirmed at catalog time