Back to Feed
BreachesApr 9, 2026

‼️🇧🇷 Threat actor Buddha is allegedly selling a complete Serasa database dump containing over 2...

Threat actor Buddha selling alleged Serasa database dump of 220M Brazilian citizen records for $350.

Vendor Watch

Run Serasa?

Get an email when a reviewed story names Serasa, usually within the hour.

Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch works

Summary

Threat actor Buddha is allegedly offering a complete database dump from Serasa, a major Brazilian credit bureau, containing personal information on over 220 million Brazilian citizens. The dataset includes names, emails, phone numbers, addresses, dates of birth, CPF numbers (Brazilian tax IDs), income data, and gender information, compressed into a 507GB file being sold for $350. This represents one of the largest Brazilian data breaches on record, with sensitive personally identifiable and financial information exposed.

Entities

Buddha (threat_actor)Serasa (vendor)