BaphyHack Reports an Attack on Credix
The public trail suggests a two-step release. On February 26, 2026, BaphyHack first announced the sale of Credix (Venezuela) data on X, describing a dataset of approximately 16,000 users containing personal details such as names, ID numbers, dates of birth, addresses, and photo IDs. On April 17, 2026, the actor reposted the material on DarkForums and described it as 44,548 rows, which may indicate a broader enumeration of the same leak or an expanded dump discovered later. The attacker also stated that some Base64-encoded ID card photos were being withheld.
Overview
Missing evidence
Impact details
44,548 Exposed records
DarkForums attributes to BaphyHack a claim of a data breach involving 44,548 records associated with the Credix/Fibextelecom credit service; no official confirmation has been found.
Classification & severity
- Category
- Information content security
- Subtype
- Leak of confidential information
- Confidence
- Medium
Severity assessment
Medium- Functional impact
- None
- Information impact
- Personal data
- Affected scope
- Multiple users
- Critical service
- None
- Public confidence
- Limited
The main public source of reports supports a claim of a data breach at the Credix/Fibextelecom credit service involving 44,548 records, though there has been no official confirmation.
Timeline
BaphyHack first announced the sale of Credix data on X, mentioning approximately 16,000 users.
Later, BaphyHack reposted the Credix leak on DarkForums and reported 44,548 rows.