What Happened
In the vcarrd.comvcarrd.com incident, a database file identified as “vcarrd.com.sql” appeared in a public breach repository in 2026, indicating that data from the vcarrd.com service had been exfiltrated and leaked as part of a credential-focused breach. The listing describes it as a file data breach containing user credentials (usernames/email addresses and associated passwords or password hashes) that are actively being used by attackers for credential stuffing and account takeover attempts on other services. No authoritative public source provides an exact record count, but the nature of the leak (a `.sql` dump for a whole service) suggests a potentially large number of account records were exposed, primarily consisting of login-related data rather than payment or highly sensitive identity documents.
