Leak of confidential information
malconguerra2 calls for an attack on Cashea
On February 21, 2026, the actor malconguerra2 claimed on DarkForums to have published 46.5 GB of confidential Cashea data, including 79,006,942 transaction records, store records, and data from partner merchants. Cashea officially confirmed a data exfiltration involving users and merchant partners from the Merchant Web environment, which occurred between January 30 and February 21, 2026, attributed to the use of valid credentials from a partner merchant’s employee account that had been compromised outside the platform, as well as insufficient controls on APIs. The company stated that the information involved consists of operational and transactional data, such as names, ID numbers, phone numbers, orders, and merchant information; it also indicated that it did not identify any compromise of user passwords, internal administrative credentials, cloud infrastructure, private keys, system secrets, or financial payment processing components. The DarkForums.ru link added on July 4, 2026, corresponds to a repost or update of the same dataset from February, not a separate incident.
malconguerra2
