One Forum Post. One Database. Eleven Tickets Leaked 109K Records.

A database breach at Eleven Tickets, a Brazilian ticketing platform, exposed the personal data of over 109,000 users in January 2022. The leaked records included contact details and identifying information that were recieved by threat actors operating in private breach-trading communities. With no passwords in the dataset, attackers pivot quickly to social engineering and targeted phishing using the exposed names and contact details.

What Attackers Can Do With Eleven Tickets Data

With full names, email addresses, and phone numbers in hand, cybercriminals can launch highly convincing phishing campaigns targeting Brazilian users. The combination of first name, last name, and phone number is partcularly valuable for SIM-swap attacks and account takeover attempts on banking and government portals commonly used in Brazil.

What Was Exposed in the Eleven Tickets Breach

• Email Address
• First Name
• Last Name
• Phone Number

Why the Eleven Tickets Breach Still Matters in 2025

Breach data does not expire. Records from 2022 continue to circulate and get bundled into larger combo lists sold on dark web marketplaces. Affected users who have not changed their email credentials or phone-linked accounts remain accessable targets for credential stuffing and fraud, years after the original incident occured.

How a Database Breach Works

A database breach occurs when an attacker gains unauthorized access to a backend data store, typically through misconfigured cloud storage, unpatched vulnerabilities, or stolen admin credentials. Once inside, they export structured tables containing user records. The data is then compressed, posted to private forums, and eventually traded or sold across multiple platforms, multiplying the exposure with each transaction.

Check If Your Data Was Exposed

HEROIC DarkWatch monitors over 400 billion breach records, including data from the Eleven Tickets breach. Search your email address now to see if your personal information is part of this or any other known data leak. Early detection is your first line of defense against identity theft and account fraud.