2026 Transfast — 11.8M payment SMS records + portal access offered (unverified)
Data compromised
Actor claim (unverified): 11,835,390 delivered SMS records (Jan–Sep 2026) with recipient phones, transaction confirmations, money-transfer details, message direction types; client portal access advertised
Technical writeup
Unverified dark-web sale / access listing — Dark Web Informer September 8, 2026. Actor “Marx” advertised ~11.8 million Transfast (Mastercard remittance) payment SMS records plus client-portal access, describing a live messaging database spanning January–September 2026. Transfast/Mastercard had not publicly confirmed at catalog time. recordsAffected 11835390 from actor claim (unverified); companyConfirmed false.
Root cause
Unverified dark-web listing (actor Marx) offering Transfast messaging-portal access and ~11.8M SMS records