Carding site B1ack’s Stash dumps 4.6 Million stolen cards for free
Carding forum B1ack’s Stash claims to have released millions of stolen CVV2 payment card records for free after suspending sellers. B1ack’s Stash, one of the most active stolen card marketplaces on the dark web, has released 4.6 million credit card records for free, not because of a law enforcement action or a system compromise, but […]

B1ack’s Stash, one of the most active stolen card marketplaces on the dark web, has released 4.6 million credit card records for free, not because of a law enforcement action or a system compromise, but essentially as a punishment for its own sellers behaving badly.
The story behind the dump is almost mundane in its internal logic. Some vendors who had purchased stolen card data through B1ack’s Stash were caught reselling that same data on competing platforms, which violated the marketplace’s terms of service. In response, the operators suspended 8 million stolen CVV2 records linked to those sellers and decided to release a portion of the inventory for free rather than simply deleting it. A public dump as a disciplinary measure, the dark web equivalent of burning the merchandise in the town square.
Related breach coverage
- Google Patches Actively Exploited Android Flaw Affecting Millions of Devices2026-06-03
Google fixed 124 Android flaws, including CVE-2025-48595, an actively exploited privilege escalation bug linked to targeted attacks. Google has released its June 2026 Android security updates, fixing 124 vulnerabilities across the mobile operating system. One flaw, tracked as CVE-2025-48595 (CVSS score of 8.4) stands out from the rest because it is already being exploited in […]
- ShinyHunters Leaks Charter Communications Data, Potentially Impacting 5 Million Customers2026-05-30
Cybercrime group ShinyHunters leaked data allegedly stolen from Charter Communications, exposing millions of customer records after a failed extortion attempt. The ShinyHunters extortion group has published data allegedly stolen from Charter Communications after the company apparently refused to pay a ransom. Charter Communications is one of the largest telecommunications companies in the United States. It […]
- Charter Communications Data Breach Could Impact Nearly 5 Million2026-05-29
The notorious ShinyHunters extortion group leaked over 42 million records allegedly stolen from Charter in April. The post Charter Communications Data Breach Could Impact Nearly 5 Million appeared first on SecurityWeek.
- A malicious VS code extension just breached GitHub ‘s internal repositories2026-05-20
One employee installed a trojanized VS Code extension. Result: ~3,800 GitHub internal repositories exfiltrated. TeamPCP claims credit, wants $50K. There is something almost ironic about GitHub, the platform that hosts the code for most of the world’s software, getting breached through a trojanized plugin for a code editor. But that is exactly what happened, and […]
