CyberHappenings logo
☰
Home Browse Watchlists Experimental About

Track cybersecurity events as they unfold. Sourced timelines. Filter, sort, and browse. Fast, privacy‑respecting. No invasive ads, no tracking.

B1ack’s Stash marketplace releases 4.6 million stolen credit card records in response to policy violations

First reported
Last updated
1 unique sources, 1 articles

Summary

Hide ▲

The B1ack’s Stash dark web carding marketplace released 4.6 million stolen credit card records for free after sellers violated platform policies by reselling card data purchased from the marketplace on competing platforms. The data dump includes full card numbers, expiration dates, CVV2 codes, cardholder names, billing addresses, email addresses, phone numbers, and IP addresses, likely originating from e-skimming or phishing operations. Approximately 70% of the cards are from the US, with additional records from Canada, the UK, France, and Malaysia. The release is part of a recurring pattern by B1ack’s Stash to distribute stolen card data for free to attract users and expand its market presence.

Timeline

  1. 19.05.2026 14:59 1 articles · 23h ago

    B1ack’s Stash releases 4.6 million stolen credit card records

    B1ack’s Stash dark web marketplace released 4.6 million stolen credit card records for free after sellers violated platform policies by reselling card data on competing marketplaces. The dataset includes full card numbers, CVV2 codes, expiration dates, and associated personal and billing details, likely stolen via e-skimming or phishing operations. Approximately 70% of the records are from the US, with additional data from Canada, the UK, France, Malaysia, and Asian financial hubs. SOCRadar analysis confirmed the authenticity of most records, with 4.3 million deemed new and usable for illicit activities.

    Show sources
    Open in new tab

Information Snippets

  • B1ack’s Stash suspended 8 million stolen CVV2 records and released 4.6 million of them for free after sellers were found reselling card data purchased from the marketplace on competing platforms, violating B1ack’s Stash policies.

    First reported: 19.05.2026 14:59
    1 source, 1 article
    Show sources

  • The dumped dataset includes full card numbers, expiration dates, CVV2 codes, cardholder names, billing addresses, email addresses, phone numbers, and IP addresses.

    First reported: 19.05.2026 14:59
    1 source, 1 article
    Show sources

  • SOCRadar validated the authenticity of some records, noting that 4.3 million appear to be new and likely usable for illicit activities, while others were expired or duplicates.

    First reported: 19.05.2026 14:59
    1 source, 1 article
    Show sources

  • Approximately 70% of the records are from the US, with Canada, the UK, France, and Malaysia making up the top five sources of the stolen cards.

    First reported: 19.05.2026 14:59
    1 source, 1 article
    Show sources

  • The dataset suggests multiple regional operations targeting English-speaking and high-purchasing-power markets globally, including Asian financial hubs like Hong Kong, Singapore, Thailand, and Malaysia.

    First reported: 19.05.2026 14:59
    1 source, 1 article
    Show sources

  • B1ack’s Stash has been active since at least 2023 and has previously released 1 million cards in April 2024 and over 4 million cards in February 2025 for free to attract users.

    First reported: 19.05.2026 14:59
    1 source, 1 article
    Show sources

  • The leaked records pose compounding risks, enabling card-not-present (CNP) fraud, fraudulent account creation, credit applications, and phishing attacks due to the inclusion of full payment and personal details.

    First reported: 19.05.2026 14:59
    1 source, 1 article
    Show sources