Diario das Leis Hack: Plaintext Passwords of 81K Users Leaked

HEROIC's DarkHive intelligence system discovered the Diario das Leis data breach, exposing 81,195 records. The breach occured in August 2018, targeting users of this Brazilian legal information and education portal. Critically, the compromised data includes email addresses and plaintext passwords, meaning no cracking is required for attackers to gain immediate access to these credentials.

Why This Is Dangerous

Plaintext passwords represent the most severe form of password exposure because attackers can use them directly without any cracking effort. Anyone who downloads this breach dataset has instant access to working username and password combinations. Legal professionals and law students who used Diario das Leis and reused thier password on other platforms, including email, banking, and government portals, face immediate account takeover risk. The professional nature of the platform's user base makes this breach especially valuable to identity thieves and fraud operators.

What Was Exposed

• Email Address
• Plaintext Password

Why This Matters

Breaches exposing plaintext passwords are immediately weaponized in credential stuffing attacks. Unlike hashed passwords that require cracking, plaintext credentials can be tested against hundreds of websites within minutes using automated tools. Legal professionals whose credentials were exposed could face unauthorized access to case management systems, client communication platforms, and financial accounts. Exposed email addresses also enable highly targeted phishing attacks against lawyers and law students, who handle sensitive client information and financial transactions.

How Database Breaches Work

A database breach occurs when attackers gain unauthorized access to a web application's backend database and extract stored user data. Platforms that store passwords in plaintext represent a critical security failure, as any breach results in immediately usable credentials with no additional effort. Attackers commonly exploit SQL injection vulnerabilities, misconfigured databases exposed to the internet, or compromised administrative accounts to access and download user tables. Once obtained, the data is distributed on cybercriminal forums where it's used to attack other services and platforms the victims may also use.

Check If You Are Affected

HEROIC offers a free identity scanner that searches over 400 billion records, including data from breaches like Diario das Leis. Visit heroic.com to scan your email address and find out if your information was exposed.