10.7M Argentina Credit & Debit Cards Leaked

Data Breach Summary

A database containing 10,670,812 credit and debit card entries tied to Argentina was published on darkforums.st in July 2025 by the user injectioninferno2. The leak surfaced in July 2025 and includes:

• Card numbers, expiration dates, CVV codes
• Cardholder names and partial billing information

This repository of financial data poses an immediate threat for fraud, identity theft, and large-scale carding operations.

---

Where and How?

The breach data was shared on darkforums.st, a well-known dark web forum specializing in stolen databases. The leak’s volume and structure suggest extraction from financial institution systems or complicit insiders, not from random scraping.

Company Data Breach History

No previous news reports or public documentation were found linking injectioninferno2 or darkforums.st leaks to Argentina’s credit/debit card systems. This appears to be the first known instance specifically targeting Argentinian payment card data. Unlike earlier leaks affecting Social Works (~20M records) and Fibertel (~2.7M records) in the same timeframe, this is the first credit/debit card dump by this actor.

---

Recommendations for Individuals

To mitigate risk, card users are urged to:

• Monitor bank and credit statements closely for unauthorized activity
• Enable transaction alerts & set spending limits
• Report any suspect charges immediately and request a new card
• Use two-factor authentication on financial accounts
• Consider enrolling in credit monitoring or fraud detection services

---

Next Steps for Security Teams

• Investigate the breach source — Determine whether this was an insider compromise, payment processor failure, or e-commerce web skimming
• Notify affected banks and customers promptly
• Reissue compromised cards and reset CVV numbers
• Audit payment system infrastructure for vulnerabilities
• Enhance web payment security with anti-skimming measures and real-time fraud detection

What is InsecureWeb?

InsecureWeb is a Dark Web monitoring service that keeps track of recent data breaches and tracks their impact by monitoring the darkest places of the internet.

Our commitment lies in providing top-notch cybersecurity services to our clients. Through continuous monitoring of the dark web and advanced threat detection methodologies, we strive to identify potential breaches promptly, enabling swift response and mitigation efforts. With our state-of-the-art tools and expertise, we prioritize the confidentiality, integrity, and availability of our clients’ data.