A malicious actor has allegedly breached KFC Venezuela, offering for sale a database containing personal and other information of over a million customers on a dark web forum
See also: Byte by Yum!: Yum! Brands' new AI technology
The data, which was leaked on October 8, 2025, includes a huge amount of sensitive customer information, creating a significant risk of fraud and identity theft for those affected.
The database is being sold as a 405 MB CSV file containing exactly 1,067,291 lines of data, indicating a large-scale breach of the fast food chain's operations in Venezuela.
The breach exposes a wide range of personally identifiable information (PII) and transactional data. According to the malicious actor's post, the leaked database includes full customer names, phone numbers, email addresses, and full shipping addresses.
The financial details disclosed are also extensive, including payment methods, exchange rates associated with transactions, as well as details of items ordered with their respective quantities and prices.
This combination of personal and financial information creates a high-risk scenario for targeted phishing campaigns, financial fraud, and other malicious activities directed against victims.
See also: Hackers say they breached KFC database
The dataset also contains operational information, such as order creation and update timestamps, sales channels, and internal store details.
The malicious actor advertised the sale on a hacking forum, providing a detailed list of the data fields included in the compromised database. To prove the authenticity of the data, the seller included a sample of the records, showing customer names, contact information, and specific order details.
The post listed numerous data fields, including cliente_fullname, cliente_phone, cliente_email , and cliente_direccion. Also included were order identifiers such as orden_id, store information, and aggregator identifiers, suggesting a deep breach of the company’s order management or customer relationship management (CRM) systems. The perpetrator invites interested parties to contact him for pricing, indicating that the data is available for purchase from other malicious actors.
The exposure of such detailed customer information puts over a million people at immediate risk. Malicious actors can use the leaked data to organize sophisticated scams, using order histories and personal details to make their fraudulent attempts appear legitimate.
See also: LockBit ransomware gang says it hacked Subway
KFC Venezuela customers are advised to be extremely cautious of unsolicited emails, text messages or phone calls claiming to be from the company or other service providers. Individuals who may be affected are advised to monitor their financial accounts for any suspicious activity. To date, KFC Venezuela has not issued a public statement regarding the alleged breach.
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
