Alleged Adidas & ICFES Leaks, Belgian Banking Sale, PayPal Recruitment & 7.2M Card Listing

SOCRadar’s Dark Web Team identified a string of new underground posts this week, including an alleged Adidas customer data leak tied to a third-party service provider, and a large credit card dataset advertised for sale. The team detected a post claiming 7,256,535 card entries were gathered in early 2025, with the seller stating the dataset does not include CVV and pricing listed at $3,000, payable by cryptocurrency and escrow offered.

A recruitment-style post claimed PayPal Classic API access for transfers and talked about drop arrangements with a percentage split. Another listing advertised Belgian banking data linked to BESOX, described as overseeing about 1,500 companies with access to IBAN, BIC, and related identifiers. The alleged ICFES leak was pitched as a 100GB data release purportedly covering information on more than 30 million Colombians.

According to SOCRadar Dark Web Team, the posts frame the leaks as protest actions or illicit finance opportunities rather than paid, restricted access models.