Our Analysts Found 201,035 CuidatePlus Health Records Exposed

HEROIC analysts identified a database breach affecting CuidatePlus, a Spanish health and wellness education platform, on June 1, 2024. The exposed dataset contains 201,035 records, including email addresses, first names, last names, and dates of birth. No passwords were included in this leak.

Why This Is Dangerous for CuidatePlus Users

Health platforms carry a particular kind of risk because the mere fact that someone appears in this database suggests they were researching health information, which is itself sensitive. Combine that with a full name and date of birth, and an attacker has enough to answer common identity verification questions used by banks, insurers, and government agencies. A date of birth paired with a real name is one of the most useful pieces of information for identity theft, since it is frequently used to verify identity over the phone or online.

What Was Exposed From the CuidatePlus Breach

• Email addresses
• First names
• Last names
• Dates of birth

Why This Matters Beyond CuidatePlus

Even without passwords, this combination of data supports serious follow-on attacks. Scammers can use your name and birthdate to attempt to open new accounts in your name, pass identity checks at other companies, or craft highly personalized phishing emails that reference your health interests to appear more credible. If this data is combined with information from other breaches, the risk of full identity theft increases significantly.

How This Health Data Breach Happened

A database breach means attackers gained direct access to CuidatePlus's stored user records rather than tricking an individual user. This typically happens through a vulnerability in the platform's website or application, weak database access controls, or stolen administrator credentials. Once attackers have that access, they export the affected tables, and the data eventually surfaces on dark web forums or private sale channels, which is how HEROIC analysts identified this exposure.

Check If Your CuidatePlus Data Was Exposed

If you have ever used CuidatePlus for health or wellness information, it is worth checking whether your data appears in this breach. HEROIC's free breach scanner checks your email address against a database of more than 400 billion leaked records, including this incident, and shows you immediately if you have been affected. Run a free scan today to protect your identity.