Credilink Allegedly Breached Exposing 243 Million Records From the Brazilian Credit Data Provider
Credilink Brazilian credit bureau allegedly breached; 243M records sold by Blastoize threat actor.
Summary
A threat actor known as Blastoize is selling a dataset of 243 million records allegedly stolen from Credilink, a Brazilian credit information and risk analysis provider. The compromised data includes sensitive personal information such as CPF national IDs, full names, addresses, vehicle ownership, presumed income, and email addresses. The actor is offering a 12 million record sample for free and directing buyers to an external marketplace for the full dataset.
Full text
Breach Report · Brazil Credilink Allegedly Breached Exposing 243 Million Records From the Brazilian Credit Data Provider A threat actor is selling a 243 million record dataset attributed to credilink.com.br, described in the post as a Brazilian credit information and risk analysis provider serving financial institutions and retailers. The seller offers a 12 million record sample for free download and points buyers to an external marketplace for the full package, with samples showing CPF national IDs, addresses, vehicle ownership, and presumed income. Post details Actor(s)Blastoize SectorFinancial services / Credit bureau TypeData Sale FormatCSV-style records PriceNegotiable (12M free sample, full DB on external marketplace) Records243,000,000 (2024 dataset) CountryBrazil Date07/05/2026 Compromised data CPF national ID Full name (NOME) and mother’s name (NOME_MAE) Address type, street, number, complement Neighborhood (BAIRRO), city (CIDADE), state (ESTADO), UF, postal code (CEP) Date of birth (DT_NASCIMENTO) Gender (SEXO) Email address Death flag and death date (FLAG_OBITO, DT_OBITO) Federal tax/receita status (STATUS_RECEITA_FEDERAL) Corporate role/share (PCT_CARGO_SOCIETARIO) Vehicle ownership (CBO, QT_VEICULOS) Up to five vehicles each with brand, model, and year (MARCA/MODELO/ANO_VEICULO 1-5) Presumed income (RENDA_PRESUMIDA) and income range (FAIXA_RENDA) Screenshots 01 Want the non-blurred screenshots? Subscribe and check out the threat feed section. darkwebinformer.com/pricing
Indicators of Compromise
- domain — credilink.com.br