BriansClub was an illicit marketplace that sold payment-card data stolen elsewhere. In 2019, the marketplace was itself hacked, exposing more than 26 million card records and giving banks, payment networks and researchers a rare look at the scale and economics of carding. That figure does not mean 26 million people suffered losses: records could be duplicated, invalid, expired or already known to issuers.
What BriansClub was
BriansClub was a carding shop: a criminal marketplace for stolen credit- and debit-card records, often called “dumps” in criminal jargon. It was not a legitimate payment service, a consumer breach-notification site or the original source of every card it listed.
Its inventory reportedly included data useful for card-present fraud, historically including counterfeit magnetic-stripe cards, and card-not-present (CNP) data used in online fraud. The marketplace connected suppliers who obtained compromised data with buyers seeking to monetize it. Gemini Advisory describes card shops as connective tissue in the broader payment-fraud ecosystem (Gemini Advisory’s 2022 payment-fraud report).
Why the name Brian Krebs appeared
The marketplace used journalist Brian Krebs’s name and likeness in its branding without permission. It was mockery and notoriety, not evidence that Krebs operated or endorsed the shop. KrebsOnSecurity reported on BriansClub and its history; the criminal marketplace and the journalist are distinct (KrebsOnSecurity’s 2024 report).
Free tools Windows power users keep installed
One-click scans. No signup required.
#1 Best Overall
- SLIM BODY WITH LARGE CAPACITY：This mens wallet measures 4.3 x 3.2 x 0.6 inches and can hold 14 cards and 10+ bills. The slim design makes it perfect for fitting into all kinds of pockets, offering great portability.
- QUICK CARD SLOTS & CASH SLOT：On the front of this minimalist wallet for men, there are 2 quick-access card slots for easy retrieval while traveling or shopping. The cash slot allows you to quickly access and store cash without having to fold bills multiple times.
- DOUBLE ID WINDOWS：This card wallet for men specifically features 2 clear ID windows for holding ID cards and driver's licenses, enabling fast and convenient access to your information.
- FID BLOCKING：This rfid wallet is lined with a special RFID-blocking material that shields against 13.56 MHz and higher frequency signals. This prevents unauthorized scanning and data theft from your chips, offering comprehensive protection for your identity and financial information.
- PERFECT GIFT IDEA FOR MEN：Crafted with high-quality materials, this leather wallet for men combines practicality for mens everyday needs, making it an ideal gift for birthdays, anniversaries, Christmas, Valentine’s Day, Father’s Day, or other special occasions.
There was another layer of impersonation: phishing sites later mimicked BriansClub and tricked would-be buyers into sending cryptocurrency to impostors. Those scams targeted criminals, not ordinary customers, and illustrate why illicit marketplaces offer no dependable consumer protection (KrebsOnSecurity’s report on phishing sites).
Where the card data came from
BriansClub mainly monetized data produced by other operations. At a high level, payment-card details can be exposed through retailer or payment-system compromises, point-of-sale malware, e-commerce skimming, phishing, compromised merchant platforms or payment forms, and reuse of records stolen earlier. A marketplace may list data from multiple sources and periods; its inventory should not be confused with one breach or one victim organization.
This distinction matters to consumers: BriansClub’s own 2019 breach exposed its criminal inventory, which had allegedly been stolen upstream. It was not a disclosure that BriansClub had originally taken every record from cardholders.
Rank #2
- This credit card holder is made of aluminum shells, ABS plastic frame and clasp closure, RFID-blocking will protect your card data from RFID scanners and readers.
- The size is 4.33 x 2.95 x 0.75 inches, Slim and small exterior design, are fit in your front pocket,suitable for travel and business carrying.
- Latches safely and securely when not in use. Rounded corner wouldn't damage on your clothes. With 7 accordion Slots, Capacity for up to more than 10 credit cards or more than 20 business cards.
- There are various patterns to choose from on the aluminum shell, including flowers, animals, and landscapes, to match your versatile style.
- This is an ideal gift that can express your thoughtfulness and kindness. Suitable for any day you want to express love on, such as Valentine's Day, birthdays, Mother's Day, etc.
How the marketplace made money
The basic business chain was theft, supply, listing, sale and attempted fraud. Suppliers provided compromised records; the marketplace organized and sold inventory; buyers attempted fraudulent transactions or resold what they bought. The shop kept part of the proceeds and paid suppliers commissions, while refunds could reduce net earnings. This is a high-level account of the economics, not a guide to buying or using stolen data.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Clear out junk files and repair common Windows errors3Scan for outdated or missing drivers - takes under a minuteNYU researchers’ analysis, reported by KrebsOnSecurity, estimated that BriansClub listed more than 19 million unique card numbers from 2015 through early 2019. They estimated about $104 million in gross revenue and roughly $24 million in profit after supplier commissions and refunds. These are research estimates based on observed marketplace data, not audited accounts. The same analysis reported supplier commissions generally in the 50%–60% range, and about 80% for CNP records, reflecting differences in supply and demand (KrebsOnSecurity’s account of the NYU analysis).
Records did not all have the same perceived value. Buyers’ preferences varied with factors such as card-present versus CNP usefulness, whether magnetic-stripe information was available, issuing region, freshness, and whether associated billing or identity details were included. The NYU analysis described geographic and issuer-size differences in observed demand; those patterns reflect criminal purchasing behavior, not a definitive ranking of banks’ security. A listing’s presence also did not prove a record was valid or that fraud occurred.
Rank #3
- Special Design: Multi-color optional and wear-proof classic business card holder looking.
- Plenty of Space: 16 card slots only measuring 4.1" x 3.0" x 1.1", including 13 credit card slots, 2 cash slots
- Protect Information Leakage: Prevents your vital information/cards from unnoticed scan with 2 outer layers RFID blocking materials.
- Extra Key Chain & Portable: Extra corns with key chain for your keys or lanyard. Portable use for shopping, traveling, etc.
- Great Gift: Practical compact wallet is the perfect gift. Give a thoughtful surprise to Men/Women on birthdays, holidays, celebrations, or any special occasion (e.g. Valentine's Day, Christmas, etc.).
What happened in the 2019 breach
BriansClub was compromised in 2019, and the incident became public in October. Reports said more than 26 million records were extracted, covering cards acquired over roughly four years; almost eight million were reportedly added during 2019 alone. The records were shared with journalists, researchers, payment networks, banks and other fraud-fighting organizations (KrebsOnSecurity’s October 2019 coverage).
Reporting placed the inventory’s estimated collective street value at about $566 million. That was an estimate of illicit-market value—not confirmed consumer losses, the amount buyers actually paid, issuer losses, or criminal profit (KrebsOnSecurity’s 2021 report). “Records” also should not be translated into an equal number of people: one person can have several cards, and records can be duplicated, expired, invalid or already identified.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Why the leak mattered to defenders
The exposure made a hidden criminal inventory actionable. Issuers and payment networks could compare records against their own portfolios, identify cards that might be compromised, and decide whether to replace them, increase transaction monitoring, block suspicious authorizations or contact customers. A card appearing in the leaked data did not prove it had been used fraudulently, but it gave defenders a reason to assess the risk before further misuse.
Rank #4
- This credit card holder is made of aluminum shells, ABS plastic frame and clasp closure, RFID-blocking will protect your card data from RFID scanners and readers.
- The size is 4.33 x 2.95 x 0.75 inches, Slim and small exterior design, are fit in your front pocket,suitable for travel and business carrying.
- Latches safely and securely when not in use. Rounded corner wouldn't damage on your clothes. With 7 accordion Slots, Capacity for up to more than 10 credit cards or more than 20 business cards.
- There are various patterns to choose from on the aluminum shell, including flowers, animals, and landscapes, to match your versatile style.
- This is an ideal gift that can express your thoughtfulness and kindness. Suitable for any day you want to express love on, such as Valentine's Day, birthdays, Mother's Day, etc.
The disclosure also revealed an uneven defensive burden. Krebs reported that large financial institutions generally had better visibility into the exposed records than smaller banks and credit unions, which could make identification and response harder for institutions with fewer resources (KrebsOnSecurity’s October 2019 coverage).
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Why chip cards did not end card fraud
EMV chips make straightforward cloning of a magnetic stripe more difficult, but they do not prevent online fraud, phishing, e-commerce skimming, account takeover or misuse of CNP data. As chip adoption expanded, some fraud activity shifted toward online channels, while U.S. adoption and merchant acceptance were uneven during the period covered by the historical analysis.
Krebs’s account of the NYU research said about 97% of BriansClub’s inventory in the period studied consisted of magnetic-stripe data, and that non-chip cards had substantially higher sales rates than chip-based cards. Those are historical findings about that marketplace and period—not a current estimate of payment-card inventory or a claim that chip cards eliminate risk (KrebsOnSecurity’s account of the NYU analysis).
Best Value
- RFID Blocking Technology: This credit card holder is made of aluminum shells and ABS plastic, designed with RFID-blocking technology to help protect your credit, ID, debit, and driver's license cards from unauthorized scanning
- Slim Compact: Slim and compact design measures 4.3 x 3 x 0.86 inches, ideal for front pockets or purses
- Card Organizer: With 7 accordion-style slots, this wallet can hold up to 10 standard credit cards or over 20 business cards
- Artistic Expression: Features a variety of artistic designs on the aluminum shell, inspired by famous paintings, flowers, and animals, to complement your personal style
- Thoughtful Gift Idea: Makes a thoughtful gift for any occasion, combining functionality and style
Was BriansClub taken down?
The 2019 incident was a compromise and leak, not a confirmed law-enforcement seizure of the whole operation. Recorded Future later reported that BriansClub became a major card-data source after Joker’s Stash closed, went offline during an infrastructure disruption in 2024, changed infrastructure and reopened after roughly a month (Recorded Future’s report).
Those disruptions do not establish a permanent takedown, and the available reporting does not verify whether BriansClub was operating under that name on August 16, 2026. Criminal marketplaces can change domains, aliases and infrastructure; an outage or leak is not proof that the suppliers and buyers have disappeared.
What consumers should do after suspected card exposure
If you suspect your card details were exposed, respond through your issuer rather than trying to investigate a criminal marketplace. A card can be exposed without being used, but prompt monitoring and issuer guidance can limit the chance of further harm.
- Contact the issuer using the number on your card or the official banking app. Ask whether it recommends replacing the card or taking other account-specific steps.
- Review recent and pending transactions, and report anything you do not recognize. Turn on transaction alerts if your issuer offers them.
- If you reused a password on a shopping or financial account that may also be involved, change it to a unique password and enable multi-factor authentication where available.
- If you believe broader identity information was exposed, consider credit monitoring or a credit freeze through the relevant credit bureaus.
- Ignore messages promising BriansClub verification, refunds or breach checks, and do not visit alleged mirrors. Impersonation scams have targeted people seeking access to the marketplace.
What merchants and financial institutions can learn
Card replacement can address exposed payment credentials, but preventing new compromises requires attention to the upstream systems that capture and process payments. The measures below address different parts of the risk rather than guaranteeing that fraud will not occur.
Recommended Free Tools
Quick Recap
- Merchants: Maintain EMV and contactless acceptance, secure payment-page architecture, monitor e-commerce pages for unauthorized skimming, use tokenization where appropriate, and limit access to payment systems through least-privilege controls.
- Financial institutions: Combine compromised-card intelligence with transaction monitoring, distinguish exposure from evidence of attempted fraud, and assess whether reissue, alerts or additional review are warranted.
- Both: Investigate suspected compromises promptly, segment affected systems, and share relevant intelligence with payment networks and law enforcement through established channels.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
