2026 Receita Federal — forum CPF dataset sale claim; 279,008,638 records (unverified)

Unverified leak-site / forum sale claim — observed July 17, 2026. Dark Web Informer reported a forum actor advertising a purported Receita Federal–sourced dataset of 279,008,638 CPF/citizen records (~69.6GB), asking about $10,000 (BTC/XMR), with two 10,000-row samples as proof, plus a cheaper alleged 2019 backup of ~248 million CPF entries (~$1,300). Claimed fields include CPF, names, DOB, contact/address data, parents' names, occupation, cadastral/tax-registration metadata, and death-related records. This follows a June 10, 2026 BuddhaGroup-linked sale claim of ~248 million citizens / ~41 million legal entities (~1.07B records, 24 SQLite DBs, ~78.7GB) that TecMundo and Poder360 reported and that Receita Federal denied as fake news / no matching breach. No independent verification that the July corpus is authentic RFB production data, newly extracted, or distinct from recycled prior Brazilian CPF mega-leaks was available at indexing time. BreachHistory catalogs the actor-cited 279,008,638 figure labeled unverified.