Decoracoes Moveis Data Breach: 5,310 Customer Records Exposed (Brazil, 2023)

5,300 Customer Records Exposed: The Decoracoes Moveis Data Breach

Not every data breach involves passwords. In March 2023, Decoracoes Moveis -- a Brazillian ecommerce platform specializing in furniture and home decor -- suffered a database breach that exposed 5,310 customer records. The leaked data included email addresses, full names, and phone numbers, but no passwords. This "lower-risk" profile is unfortunatly misleading: a combination of verified email address, real name, and phone number is exactly what social engineering and phishing attackers need. Costumers whose data was exposed face ongoing risk from targeted scams, SMS phishing, and impersonation attacks -- even without passwords being in the breach.

Decoracoes Moveis March 2023: Breach Summary

• Records Exposed: 5,310
• Data Types: Email addresses, phone numbers, first names, last names
• Breach Type: Database
• Country Affected: Brazil
• Date Leaked: March 22, 2023

Why PII-Only Breaches Still Pose Real Risk

A breach that exposes names, emails, and phone numbers without passwords is often dismissed as lower severity. In practice, this data has significant value to cybercriminals. Email address plus real name plus phone number enables highly credible phishing emails that address the victim by name, SMS scams that appear to come from a known contact, and voice phishing calls where the attacker already knows who they're speaking to. This "PII-only" data is also frequently combined with other breach data -- attackers cross-reference multiple breach databases to build complete victim profiles, enriching what appears to be a low-value dataset into a high-fidelity target list for fraud.

Small Ecommerce Platforms as High-Value Targets

Decoracoes Moveis illustrates a broader pattern: smaller ecommerce sites often collect the same customer data as major retailers but invest significantly less in security infrastructure. They maintain databases of customer names, contact details, and purchase histories -- all valuable to attackers -- while lacking the dedicated security teams, monitoring tools, and compliance frameworks that larger platforms deploy. For Brazilian consumers who shopped at Decoracoes Moveis, the breach is a reminder that their personal data sits across dozens of smaller platforms they may not even remember registering with, each representing a potential exposure point.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches across more than 400 billion exposed records -- including database breaches like the Decoracoes Moveis incident -- to tell you instantly if your email address has appeared in known data breaches. Run a free scan today at HEROIC.com.