Skip to content
Tips
Support
Sign In Subscribe
Data Breaches

Payment Firm Nayax Allegedly Fully Breached, Actor Threatens 100TB Release With Over 1 Billion Card Records

,   and  Dark Web Informer
9 min read
Breach Report Israel flagIsrael Fintech / Payments Pending Release

Payment Firm Nayax Allegedly Fully Breached, Actor Threatens 100TB Release With Over 1 Billion Card Records

A threat actor using the alias TheSyndicate claims to have fully compromised Nayax, an Israeli global payments and fintech company (NASDAQ: NYAX, TASE: NYAX.TA), stating they have been inside its systems for almost a year. The actor announces that over 100TB of exfiltrated data will be released on July 21st, allegedly including over 1 billion card-data records, full KYC data, complete prepaid card data, customer identities, transaction histories, internal API keys and credentials, infrastructure maps, source code, and financial records. They say a portal to query the card data and download raw files will follow. The claim is unverified and the data has not yet been released.

Data100TB+ claimed
Cards1 billion+
CountryIsrael flagIsrael
ActorTheSyndicate

▣Post details

TargetNayax (nayax.com)
CountryIsrael flagIsrael
SectorFintech / Payments
ClaimFull compromise, 100TB+ exfiltrated
Release date (announced)
Access claimAlmost a year inside
Observed
ActorTheSyndicate

!Allegedly included

  • 100TB+ exfiltrated (claimed)
  • Over 1 billion card records
  • Full KYC data
  • Prepaid card data
  • Customer identities
  • API keys & credentials
  • Source code & repositories
  • Infrastructure maps

◱Screenshot

Nayax full breach announcement forum post screenshot, July 2026 Screenshot 1 Redacted preview

⚠Potential impact

If genuine, this would be one of the largest payment-related breaches on record. The combination of payment card data at billion-record scale, KYC identity data, and internal API keys and credentials would enable large-scale payment fraud, identity theft, and further attacks against Nayax's merchants and systems. The exposure of source code and infrastructure maps would compound the risk. The actor has announced a future release rather than posting data, so at this stage the scope is a claim. No data, samples, or the actor's release site are reproduced here. The claim is unverified.

iStatus

Unverified

This is a pre-announcement: the actor claims a full compromise and says the data will be released on July 21st through a portal, with a Telegram update promised beforehand. No data has been posted yet, and neither the release site nor the contact channel is reproduced here. The claim is unverified and Nayax has not publicly addressed it.

Want everything on this breach, including the unblurred screenshots? Paid subscribers get the full claim details, breach URL, and more. Check out the threat feed, then after subscribing, search there for this alert. View pricing →

DARK WEB INFORMER - THREAT INTELLIGENCE

Related

Latest