Skip to content

KFC Venezuela Dataset Claim Lists 1.54 Million JSON Records in 17.5 GB Archive

Data Exposure Report Venezuela flagVenezuela Food & Beverage Customer & Order Data Leak Claim Unverified

KFC Venezuela Dataset Claim Lists 1.54 Million JSON Records in 17.5 GB Archive

Claimed records1,542,021
Claimed size17.5 GB
FormatJSON
Date shownOct 13, 2026

An actor using the handle "malconguerra2" claims to be sharing a KFC Venezuela dataset containing confidential information. The post advertises approximately 1.55 million records, with the detailed content description listing 1,542,021 JSON records totaling 17.5 GB.

A visible sample shows structured customer and transaction-related fields, including full names, email addresses, phone numbers, physical addresses, order or cart information, product names, prices and status fields. The listing also provides a Telegram contact associated with the actor. The dataset, its source, the stated record count, file size and current availability have not been independently verified.

Post details

OrganizationKFC Venezuela
CountryVenezuela flagVenezuela
SectorQuick-service restaurant / food & beverage
Actor"malconguerra2"
Claimed volume1,542,021 records
Claimed size17.5 GB
FormatJSON
Post date shown

What the post claims

  • 1,542,021 JSON records
  • 17.5 GB dataset size
  • Customer full names visible in sample
  • Email addresses visible in sample
  • Phone numbers visible in sample
  • Physical addresses visible in sample
  • Order or cart information visible
  • Product names and descriptions visible
  • Product pricing fields visible
  • Status fields visible
  • Store-related fields visible
  • Telegram contact provided

The visible sample appears to combine customer information with shopping-cart or order data and product metadata. Personal values from the sample are not transcribed in this report.

Screenshots

The supplied capture shows the KFC Venezuela claim, the advertised 17.5 GB size and 1,542,021-record count, a JSON sample containing customer and transaction-related fields, and a Telegram contact.

IOCs & contact identifiers

Identifiers directly visible in the listing. These support correlation and do not independently verify the dataset claim.

TypeIdentifierSource
Actor handlemalconguerra2Screenshot 1
Telegram@M4lconGuerr4Screenshot 1

No Tox ID, Session ID, malware hash, attacker-controlled domain or attacker-controlled IP address is visible in the supplied material. Personal identifiers shown in the purported sample are not included in this table. URLs to any data will always be blurred out, but are available for subscribers on the threat feed or ransomware feed.

Mapped techniques

Claimed identifies behavior explicitly described by the actor. Inferred identifies an analytical mapping supported by the supplied material. Neither label means the activity has been independently verified.

  • CollectionT1213.006Data from Information Repositories: DatabasesInferredThe listing presents a structured JSON dataset containing customer and transaction-related information. The supplied material does not reveal how the data was obtained or independently establish unauthorized access to KFC Venezuela systems.

Potential impact

If authentic, the claimed dataset could expose customer names, email addresses, phone numbers, home addresses and purchase-related information. The combination could support targeted phishing, impersonation, account-focused social engineering or other privacy-related abuse involving affected customers.

Status Unverified

Dark Web Informer has not independently verified the dataset's authenticity, source, 17.5 GB size, 1,542,021-record count, sample contents or current availability. The supplied screenshot documents the listing and visible JSON sample, not independent confirmation of the underlying dataset.

Dark Web Informer

Latest