Through a forum post targeting the criminal underground, B1ack Stash recently declared the suspension of approximately 8 million stolen CVV2 records from its active inventory. The stated reason: sellers on the platform had been reselling cards purchased from B1ack’s Stash in competing shops, violating the marketplace’s internal rules.
Rather than simply removing the affected cards, the operator/s behind the marketplace chose to release approximately 4.6 million of them as a free download, directing users to the marketplace’s Freebies section. The post also extended an olive branch to sellers deemed trustworthy, offering them a “second chance” through a support ticket system, and teased the upcoming launch of a new card database.
The announcement was written in both English and Russian, consistent with the marketplace’s established communication style, targeting an international criminal audience.
What Does the Leaked Data Look Like?
The sample data shared as part of this release follows a structured format typical of carding databases. Each record contains:
Full credit/debit card number (16-digit PAN)
Expiration date (month/year)
CVV2 code
Cardholder’s full name
Billing address (street, city, state, ZIP code, country)
Email address
Phone number
IP address
The data appears to be sourced from e-commerce skimming or phishing operations, given the presence of full cardholder identity details alongside payment data.
Sample from the credit card data dump
SOCRadar’s analysis found the records consistent with genuine compromise data, passing BIN and algorithm checks. After filtering duplicates, expired cards, and previously known entries, an estimated 4.3 million cards appear to be net new and potentially actionable. SOCRadar’s validation of the dataset is ongoing.
Through a forum post targeting the criminal underground, B1ack Stash recently declared the suspension of approximately 8 million stolen CVV2 records from its active inventory. The stated reason: sellers on the platform had been reselling cards purchased from B1ack’s Stash in competing shops, violating the marketplace’s internal rules.
Rather than simply removing the affected cards, the operator/s behind the marketplace chose to release approximately 4.6 million of them as a free download, directing users to the marketplace’s Freebies section. The post also extended an olive branch to sellers deemed trustworthy, offering them a “second chance” through a support ticket system, and teased the upcoming launch of a new card database.
The announcement was written in both English and Russian, consistent with the marketplace’s established communication style, targeting an international criminal audience.
What Does the Leaked Data Look Like?
The sample data shared as part of this release follows a structured format typical of carding databases. Each record contains:
Full credit/debit card number (16-digit PAN)
Expiration date (month/year)
CVV2 code
Cardholder’s full name
Billing address (street, city, state, ZIP code, country)
Email address
Phone number
IP address
The data appears to be sourced from e-commerce skimming or phishing operations, given the presence of full cardholder identity details alongside payment data.
Sample from the credit card data dump
SOCRadar’s analysis found the records consistent with genuine compromise data, passing BIN and algorithm checks. After filtering duplicates, expired cards, and previously known entries, an estimated 4.3 million cards appear to be net new and potentially actionable. SOCRadar’s validation of the dataset is ongoing.
——————————————————–
Click Here For The Original Source.
