Threatline

Addi - 34,532,941 breached accounts

In March 2026, the Colombian fintech company and advised customers that "it is possible that your personal information may have been compromised". The "pay or leak" extortion group and published a large trove of personal data allegedly obtained from Addi. The data included 34M unique email addresses from credit scoring requests, credit bureau records, customer identity records and email validation logs. It also contained government issued IDs (Cédula de Ciudadanía), estimated income, socioeconomic levels, purchases and other credit-related data points. Addi identified unauthorised activity on its platform ShinyHunters subsequently claimed responsibility