Brazilian Food-Delivery Giant iFood Targeted in Alleged 43.8M-Record Customer Data Extortion
iFood breach exposes 43.8M Brazilian customer records including CPF IDs and payment data.
Summary
A threat actor using the alias 'bacen' claims to possess 43.8 million customer records from Brazilian food-delivery platform iFood, allegedly including CPF national IDs, full names, emails, phone numbers, and credit-card data. The attacker is reportedly conducting an extortion campaign around the stolen data. This represents a significant data exposure affecting a major Brazilian service provider.
Full text
Data Breaches Brazilian Food-Delivery Giant iFood Targeted in Alleged 43.8M-Record Customer Data Extortion , and Dark Web Informer May 28, 2026 . 3:20 PM 12 min read đť•Ź Share on Facebook Share on Pinterest Share on LinkedIn Share on WhatsApp Share via Email â–ŁPost details !Allegedly exposed â—±Screenshot âš Potential impact iStatus âś• Related Data Breaches Saudi Portal Nitaqat Listed in Alleged 437K-Record Contacts & CRM Data Sale , and Dark Web Informer May 27, 2026 Paid Members Public Data Breaches UK Transport Firm Tripocity Listed in Alleged 202K-User Database Sale , and Dark Web Informer May 26, 2026 Paid Members Public Data Breaches Brazilian Logistics Firm EcoAssist Listed in Alleged 1.19M-Record Personal Data Sale , and Dark Web Informer May 26, 2026 Paid Members Public Data Breaches Singapore F&B Chain Koufu Listed in Alleged 191K-User Database Sale , and Dark Web Informer May 26, 2026 Paid Members Public Latest Leaks Bermudian Financial Service EasyPay Hit by Alleged Full Database Leak With 2M Transactions & 10K Cards , and Dark Web Informer May 27, 2026 Paid Members Public Leaks Mexican Civil Protection Training Portal Hit by Alleged Admin Compromise & Credential Leak , and Dark Web Informer May 27, 2026 Paid Members Public Leaks French Campsite Federation FNHPA Hit by Alleged 9K Member & Invoice Leak , and Dark Web Informer May 27, 2026 Paid Members Public Leaks Mexican Instituto TecnolĂłgico de Zacatepec Named in Alleged Student Database Leak , and Dark Web Informer May 27, 2026 Paid Members Public