A threat actor is selling a database allegedly stolen from Shaparak, an Iranian state-sponsored enterprise that operates and supervises the country’s unified electronic card payment network system.
The actor claims the breach affects 168,296,554 unique customers and that the 55.36 GB database includes customer data from Saderat Bank and Mellat Bank.
According to the actor, the allegedly compromised data includes:
- Full names
- Card numbers
- Account numbers
- National codes
- Dates of birth
- Email addresses
- Phone numbers
- Branch IDs
- Password hints
- Usernames
- Contact IDs












