The CNPBA Leak Could Unlock Buenos Aires Nutritionists’ Accounts

In November 2024, HEROIC identified 6,970 records from the Colegio de Nutricionistas de la Provincia de Buenos Aires (CNPBA), the professional regulatory body overseeing nutritionists in Buenos Aires Province, Argentina. The data appeared on a hacking forum and contained email addresses, full names, and MD5 password hashes.

Why the CNPBA Breach Is Dangerous

Attackers with MD5 hashes can run them through rainbow table lookups and GPU-accelerated cracking tools, converting hashed passwords back to plaintext within hours or days. Once cracked, these credentials can be used to access the CNPBA portal and any other service where victims reused the same password.

What Was Exposed in the CNPBA Leak

• Email addresses
• First and last names
• MD5 password hashes

Why This CNPBA Data Puts You at Risk

One cracked CNPBA password can unlock every service where that password was reused -- email accounts, banking platforms, government portals, and professional networks. The combination of full names and email addresses also enables targeted phishing attacks against Argentina's licensed nutritionist community.

How Database Breaches Work

Attackers exploit vulnerabilities in web application databases to extract stored user records. In this case, the CNPBA's database was accessed and its contents exported, exposing the personal and credential data of every registered member. The records were subsequently shared on underground forums.

Check If Your Data Was Exposed

HEROIC operates one of the world's largest breach databases, covering more than 400 billion leaked records. Use HEROIC's free breach scanner to check if your email address or credentials appeared in the CNPBA leak or thousands of other breaches in our database.