A threat actor claims to be selling the databases of Rappi, RappiCarga, and RappiPay, affecting users across Colombia, Peru, Mexico, Brazil, and Chile. According to the threat actor, the full data amounts to more than 5TB.
The alleged price for this extensive data set is $10,000. The threat actor also states that they are accepting transactions through middleman and escrow with BreachForums staff only, ensuring a certain level of security for the buyer. The threat actor claims that the database is freshly dumped.
The samples provided include:
Rappi: 32 million lines
RappiCarga: 20 million lines
RappiPay: 46,000 lines
The threat actor mentioned that they did not dump all the data themselves, instead offering database access to the buyer to perform the data dump.