BaphyHack
BaphyHack is an alias observed in data breach claims posted on forums such as DarkForums. The incidents linked to it should be treated as claims made by the actor or forum sources unless corroborated by external evidence.
- Incidents
- 2
- High impact
- 0
- First seen
- Apr 16, 2026
- Latest seen
- Apr 17, 2026
Linked incidents
BaphyHack Reports an Attack on Credix
The public trail suggests a two-step release. On February 26, 2026, BaphyHack first announced the sale of Credix (Venezuela) data on X, describing a dataset of approximately 16,000 users containing personal details such as names, ID numbers, dates of birth, addresses, and photo IDs. On April 17, 2026, the actor reposted the material on DarkForums and described it as 44,548 rows, which may indicate a broader enumeration of the same leak or an expanded dump discovered later. The attacker also stated that some Base64-encoded ID card photos were being withheld.
BaphyHack Reports an Attack on SmartBuy
On April 16, 2026, the threat actor BaphyHack leaked the entire database of SmartBuy, a Venezuelan online electronics store, on DarkForums. The sample of compromised data contained email addresses from various domains, including @smartbuy.online, as well as Telegram contact information.