B 1ack’s Stash, a well-known Dark Web carding marketplace, has announced the free release of approximately 4.6 million stolen credit card records, framed as a response to seller misconduct on its platform. In the same move, the operators declared the suspension of around 8 million stolen CVV2 records from their inventory and released about 4.6 million of them as a free download, directing users to the Freebies section.
SOCRadar’s analysis suggests the leak contains full PAN, expiry dates, CVV2 codes, cardholder names, billing addresses, emails, phone numbers and IP addresses, with an estimated 4.3 million cards net new after filtering duplicates and expired entries. Geographic distribution shows the United States accounts for roughly 70% of the records, with Canada and the United Kingdom among the next most affected countries.
This release follows an earlier free dump in February 2025, when 4 million cards were released for free, illustrating a recurring pattern of free releases to attract buyers and bolster marketplace credibility. According to SOCRadar, the data appears consistent with genuine compromise data and is likely to drive fraud activity across downstream victims.