The EvaProfessional Hack: Personal Data Exposed for 8,830 People

In March 2023, EvaProfessional, a Spanish hair care brand, experienced a database breach that exposed records for 8,830 users. The compromised dataset, discovered on March 13, 2023, contained a wide range of personally identifiable information including names, email addresses, birthdates, IP addresses, and bcrypt password hashes. The breadth of data types exposed makes this breach partcularly consequential for affected customers.

Why Exposed Birthdates and Personal Details Put You at Risk

The combination of full name, email address, birthdate, gender, and IP address creates a detailed personal profile that can be exploited for identity theft and targeted fraud. Even though the passwords were hashed with the strong bcrypt algorithm, attackers can still use the remaining data for social engineering or to bypass identity verification systems. Customers whose information was exposed should be alert to suspicious activity and consider monitoring their credit and accounts.

What Was Exposed in the EvaProfessional Breach

• Email Address
• Password Hash
• First Name
• Last Name
• IP Address
• Birthday
• Gender

Why the EvaProfessional Breach Still Matters Today

The personal data exposed in the EvaProfessional breach remains accessable to bad actors on data markets and dark web forums where breach records are traded. Birthdates and full names combined with email addresses are commonly used to answer security questions, verify identities, and craft convincing phishing messages. The 8,830 affected users should assume this information is still in circulation and act accordingly.

How Database Breaches Work

A database breach occurs when an attacker gains unauthorized access to a company's stored data, typically by exploiting a software vulnerability, weak credentials, or a misconfigured server. Once inside, the attacker can copy or download entire tables of user records. The stolen data is then often sold or published on dark web marketplaces.

Check If Your Data Was Exposed

HEROIC's breach search engine indexes over 400 billion records from thousands of known data breaches, including the EvaProfessional incident. Enter your email address to instantly find out whether your personal information was part of this or any other known breach, and take steps to protect your identity today.