BidenCash Dump 1.9M Compromised Debit/Credit Cards

On December 20th, 2023, BidenCash, a card shop, uploaded and shared 1.9 million stolen debit/credit cards on the XSS dark web forum. The data dump consisted of compromised card numbers, expiration dates, and CVV numbers.

Written by
Nguyen Nguyen
on
December 22, 2023

This article outlines the components of the data dump and the potential danger for the organizations and victims affected. Below are advertisements posted by the group.

bidencash
[BidenCash] Over 1,000,000 CVV for FREE {20.12.2023}

Analysis

The researcher acquired the shared file and carefully examined the data. The file comprises an estimated 1.9 million cards, including debit, credit, and charge cards. It is structured as a CSV text document, with each column separated by the ‘|’ symbol. Each row includes the complete card number, expiration date, and CVV. Notably, this dump lacks additional bank information and card owner details, which were previously uploaded earlier in the year (BidenCash Dump 2.1M Compromised Debit/Credit Cards). The sample below illustrates the format of the dump file.

bidencash content
Dump Samples

There are a total of 1,912,935 card numbers listed in the file. None of these cards have expired, and 75% of them are projected to expire in the next few years, as shown below.

expired_year

There are almost 60% of the card are Visa and almost 40% are Mastercard as shown below.

top20issuers

Summary

The release of this information has a significant impact on the affected users, not just the financial institutions. In the short term, it is crucial to protect the impacted users by disabling their cards to reduce the risk of fraudulent activity.

If you have any questions or concerns, please do not hesitate to contact us at contact@cyberarmor.tech. We are here to help and are committed to finding solutions to your cybersecurity challenges.

About the Author

Nguyen Nguyen

Nguyen is a seasoned cybersecurity leader with over 15 years of experience in software engineering, malware research, and cyber threat intelligence.

Read More...