One Company. 290,871 Users. The Expandia Breach Exposed Passwords.

HEROIC analysts identified a data breach tied to Expandia, a Spanish company that offers household services through Expandia.com.es, dated April 20, 2024. The exposed dataset contains 290,871 records, including email addresses, phone numbers, first and last names, and bcrypt hashed passwords.

Why the Expandia Breach Is Dangerous Even With Hashed Passwords

Bcrypt is a strong hashing method, which means attackers cannot simply read these passwords the way they can with plaintext leaks. But hashed passwords can still be cracked over time, especially weak or common ones, and the real risk here comes from everything else in the dataset. Full names, phone numbers, and email addresses together give attackers exactly what they need to impersonate Expandia, craft convincing phishing messages, or attempt account takeover elsewhere.

What Was Exposed in the Expandia Breach

• Email addresses
• Phone numbers
• First names
• Last names
• Bcrypt hashed passwords

Why This Matters for Expandia Customers

When names, phone numbers, and email addresses are combined, they form a complete profile that scammers can use for targeted phishing and social engineering, not just generic spam. If any of the hashed passwords are eventually cracked, and the same password was reused on other accounts, that opens the door to credential stuffing, account takeover, and identity theft well beyond the original Expandia account.

How a Database Breach Like This Happens

This incident stems from a direct compromise of Expandia's customer database rather than malware on individual devices. In cases like this, attackers typically find a way into a company's systems, whether through a vulnerable server, a stolen employee credential, or a misconfigured database, and then copy out customer records in bulk. The stolen data is then often shared or sold on dark web forums and marketplaces.

Check If You Are Affected

If you have ever used Expandia's services, it is worth checking whether your information was part of this 290,871-record exposure. HEROIC's free breach scanner checks your email against more than 400 billion leaked records so you can see your exposure and take action, like updating passwords and watching for phishing attempts.