> ## Content Index
> Fetch the complete content index at: https://darkwebinformer.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Belgian Consumer Database Allegedly Exposed, 148,251 Citizens With Bank Account Numbers and Birth Dates
- URL: https://darkwebinformer.com/belgian-consumer-database-allegedly-exposed-148-251-citizens-with-bank-account-numbers-and-birth-dates/
- Published: 2026-08-12T22:59:31.000Z
- Updated: 2026-08-12T22:59:31.000Z
- Author: Dark Web Informer
- Tags: Data Breaches

Breach Report ![Belgium flag](https://flagcdn.com/w40/be.png)Belgium Data Broker / Marketing Free Download 

## Belgian Consumer Database Allegedly Exposed, 148,251 Citizens With Bank Account Numbers and Birth Dates

An actor posting as **exfilar** claims to have found an unsecured marketing database holding **148,251 Belgian consumer records**, described as left accessible with **no authentication and no encryption**. The 81MB export is said to contain **40,455 bank account numbers**, 52,688 email addresses, 43,234 phone numbers, and full names, postal addresses, genders, dates of birth, and subscription details, covering **every province in Belgium**. The operator is not identified: the actor describes it only as a **data broker or loyalty programme aggregator** and states the host is unknown, meaning affected citizens have **no named party to approach**. The claim is **unverified**.

Severity CRITICAL 

Citizens148,251

Bank accounts40,455

OperatorUnidentified

Actorexfilar

### ▣Post details

TargetUnidentified data broker

Country![Belgium flag](https://flagcdn.com/w40/be.png)Belgium

SectorMarketing / Data aggregation

ListingFree, reply to unlock

Records148,251 across 5 files

CauseClaimed open server

ObservedAug 12, 2026

Actorexfilar

### !Allegedly included

- IBAN bank account numbers
- BIC bank codes
- Legacy account numbers
- Full names and titles
- Dates of birth
- Gender
- Street and house numbers
- Apartment or box numbers
- Postal codes and cities
- Primary phone numbers
- Secondary phone numbers
- Email addresses
- Subscription types
- Order identifiers

### ◱Screenshots

[ ![Belgian consumer database exposure forum post screenshot, August 2026 (1 of 3)](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/08/1327685782934671357986128974598712.png) Screenshot 1 Redacted preview ](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/08/1327685782934671357986128974598712.png) [ ![Belgian consumer database exposure forum post screenshot, August 2026 (2 of 3)](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/08/1327685782934671357986128974598713.png) Screenshot 2 Redacted preview ](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/08/1327685782934671357986128974598713.png) [ ![Belgian consumer database exposure forum post screenshot, August 2026 (3 of 3)](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/08/1327685782934671357986128974598714.png) Screenshot 3 Redacted preview ](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/08/1327685782934671357986128974598714.png) 

### ⚠Potential impact

An **IBAN paired with a verified name, home address, and date of birth** is the strongest combination in this dataset. It supports direct debit fraud, and it makes a caller reciting a person's own account details and birth date extremely difficult to doubt. Because the records also carry **subscription type and order identifiers**, a fraudulent message can reference a service the recipient actually holds. The exposure is aggravated by the operator being unknown: **nobody can be notified, no controller can be held to account, and affected citizens cannot check whether they are included**. Under GDPR this would be a reportable breach, but only once a controller is identified.

### iStatus

Unverified 

The actor publishes record samples but **names no company and states the host is unknown**, so the claim cannot be checked against any operator and the origin of the aggregation is unestablished. Dark Web Informer is **not reproducing the sample records, which contain living individuals' bank details**. The post credits a **scanning tool the actor is separately selling for $50,000**, and advertises paid penetration testing. This is the seventh listing from this actor in eight days. The claim is **unverified**.

Want everything on this breach? **Paid subscribers** get the full claim details and more. Check out the [threat feed](https://darkwebinformer.com/threat-feed/), then after subscribing, search there for this alert. [View pricing →](https://darkwebinformer.com/pricing) 

[DARK WEB INFORMER](https://darkwebinformer.com/) \- THREAT INTELLIGENCE