Leak of confidential information
iDaddy Reports an Attack on KFC Venezuela
On October 9, 2025, a threat actor known as iDaddy claimed to be selling a database of KFC Venezuela orders and customers on DarkForums. The alleged data breach consists of a 405 MB CSV file containing 1,067,291 customer records.
Overview
Missing evidence
The victim's exact domain is not specified.The sample data is cropped out of the image.
Impact details
1,067,291 Exposed records
DarknetSearch/Kaduu and HackerAlert are reporting on an alleged post by iDaddy on DarkForums regarding 1,067,291 customer records and orders from KFC Venezuela; neither KFC nor any independent forensic analysis has confirmed the data breach.
full namesphone numbersemail addressesdelivery addressespayment methodsorder details
Classification & severity
- Category
- Information content security
- Subtype
- Leak of confidential information
- Confidence
- Medium
Severity assessment
Medium- Information impact
- Suspected
- Affected scope
- National
- Critical service
- None
- Public confidence
- Limited
Evidence supports only an alleged customer/order data breach claim, with no confirmed operational disruption or confirmation from the victim.
Data exfiltration· Claimed Confidentiality
Timeline
Claim
iDaddy listed KFC Venezuela as an alleged victim.