The AtendeSaude Breach Happened in 2022. 34,812 Records Still Trade.

HEROIC analysts identified a dataset from AtendeSaude, a Brazilian ecommerce platform for healthcare equipment, tied to a management portal breach dated June 16, 2022. The dataset contains 34,812 records, each pairing an email address with a phone number, first and last name, gender, birthday, and a bcrypt hashed password. Years later, this data is still being traded on a cybercrime forum, giving attackers an ongoing supply of detailed personal profiles to work with.

Why the AtendeSaude Data Combination Is Still Dangerous

Bcrypt is a strong hashing algorithm, which means the passwords themselves are harder to crack than in many other breaches. But the real danger here is not the password, it is everything sitting next to it. A full name, birthday, phone number, and gender combined with an email address is enough for an attacker to build a convincing impersonation of the victim, whether that is calling a bank pretending to be them or crafting a phishing email that feels personal and legitimate.

What Was Exposed in the AtendeSaude Breach

• Email addresses
• Phone numbers
• First and last names
• Gender
• Birthdays
• Password hashes (bcrypt)

Why This Matters Years After the Breach

Personal details like a birthday or phone number do not expire. Long after a breach happens, this kind of data still fuels identity theft, targeted phishing, and account takeover attempts, especially when it is combined with credential stuffing against other accounts the person may hold. The longer this data circulates, the more times it can be recombined with newer leaks to build an even fuller profile of each victim.

How This Database Breach Happened

This incident is classified as a database breach originating from AtendeSaude's management portal. Rather than a broad website vulnerability, this pattern typically points to compromised administrative credentials or direct access to the backend database, allowing an attacker to pull out the entire customer record set in one action before posting it to a cybercrime forum for others to use or sell.

Check If Your Information Was in the AtendeSaude Leak

If you ever placed an order with AtendeSaude, it is worth finding out whether your details are part of this leak. HEROIC's free breach scanner checks your email against a database of more than 400 billion leaked records, including this one, so you can see exactly what was exposed and take steps to protect your accounts.