Leak of confidential information

BaphyHack Reports an Attack on Credix

The public trail suggests a two-step release. On February 26, 2026, BaphyHack first announced the sale of Credix (Venezuela) data on X, describing a dataset of approximately 16,000 users containing personal details such as names, ID numbers, dates of birth, addresses, and photo IDs. On April 17, 2026, the actor reposted the material on DarkForums and described it as 44,548 rows, which may indicate a broader enumeration of the same leak or an expanded dump discovered later. The attacker also stated that some Base64-encoded ID card photos were being withheld.

Overview

Missing evidence

The exact content of the 44,548 leaked rows is not fully detailed in the visible text, aside from the actor mentioning that they keep the photos of the ID cards for themselves.

Impact details

44,548 Exposed records

DarkForums attributes to BaphyHack a claim of a data breach involving 44,548 records associated with the Credix/Fibextelecom credit service; no official confirmation has been found.

customer recordsidentity documentscontact informationcredit service records

Classification & severity

Category
Information content security
Subtype
Leak of confidential information
Confidence
Medium

Severity assessment

Medium
Functional impact
None
Information impact
Personal data
Affected scope
Multiple users
Critical service
None
Public confidence
Limited

The main public source of reports supports a claim of a data breach at the Credix/Fibextelecom credit service involving 44,548 records, though there has been no official confirmation.

Data exfiltration· Claimed Confidentiality

Timeline

Claim

BaphyHack first announced the sale of Credix data on X, mentioning approximately 16,000 users.

Claim

Later, BaphyHack reposted the Credix leak on DarkForums and reported 44,548 rows.

Evidence & sources

3 sources