Coordinadora de la Mujer Breach: 22,971 Bolivian Accounts Exposed

HEROIC's DarkHive intelligence system discovered the Coordinadora de la Mujer data breach, exposing 22,971 records. The breach occured in August 2018, affecting users of this Bolivian feminist civil-society network and advocacy foundation. Leaked data includes email addresses and SHA1-hashed passwords, putting members of this sensitive organization at heightened risk of targeted attacks.

Why This Is Dangerous

SHA1 is a deprecated hashing algorithm that modern cracking tools can reverse at high speed. Attackers who obtain these hashes can crack thier corresponding passwords using precomputed lookup tables and GPU-based brute force techniques. Members of advocacy organizations are particularly valuable targets for politically motivated threat actors who seek to expose membership lists, infiltrate communications, or use compromised accounts to spread disinformation.

What Was Exposed

• Email Address
• Password Hash (SHA1)

Why This Matters

Credential stuffing, account takeover, and identity-based targeting all become possible when email addresses and crackable password hashes are exposed together. For members of civil society organizations, the risks extend beyond financial fraud to include physical safety concerns if bad actors use the compromised accounts to identify and track activists. Phishing campaigns targeting recuring breach victims can also weaponize membership data against the organization itself.

How Database Breaches and Combolists Work

A database breach occurs when attackers extract user records from a website's backend systems, often exploiting unpatched software vulnerabilities. SHA1 hashes, once extracted, are cracked using precomputed rainbow tables or cloud-based cracking services that can process billions of candidates per second. The resulting plaintext credentials get compiled into combolists and circulated across hacking forums and Telegram channels for use in automated credential stuffing campaigns.

Check If You Are Affected

HEROIC offers a free identity scanner that searches over 400 billion records, including data from breaches like Coordinadora de la Mujer. Visit heroic.com to scan your email address and find out if your information was exposed.