BaphyHack Reports an Attack on SmartBuy
On April 16, 2026, the threat actor BaphyHack leaked the entire database of SmartBuy, a Venezuelan online electronics store, on DarkForums. The sample of compromised data contained email addresses from various domains, including @smartbuy.online, as well as Telegram contact information.
Overview
Missing evidence
Impact details
Monitoring sources and forums support an as-yet-unconfirmed report of a data breach involving SmartBuy’s employee and administrator database, which is said to include employee and administrator records, emails, password hashes, and system administration details. The publicly available evidence analyzed did not confirm the existence of customer records.
Classification & severity
- Category
- Information content security
- Subtype
- Leak of confidential information
- Confidence
- Medium
Severity assessment
Medium- Functional impact
- None
- Information impact
- Personal data
- Affected scope
- Organization-wide
- Critical service
- None
- Public confidence
- Limited
The primary source supports a reported complete leak of the SmartBuy database, but no official confirmation or independent validation was found.
Timeline
BaphyHack listed SmartBuy as an alleged victim.