Flores y Regalos en Bolivia: 146K Passwords Exposed. Are You One?

HEROIC analysts identified the Flores y Regalos en Bolivia database breach in August 2018, when 146,764 user records from the Bolivian online florist and gift platform were found circulating in breach aggregation feeds. The exposed data included email addresses and MD5 password hashes, meaning that what seperate layers of protection were supposed to provide was undermined by a weak, outdated hashing algorithm that modern tools break in seconds. Shopping platforms hold real customer relationships, and this breach put all of them at risk.

Why MD5-Hashed Passwords From a Shopping Site Are Dangerous

Customers who registered on Flores y Regalos en Bolivia likely used the same email and password on other shopping accounts, social media, or email providers. MD5 hashes can be cracked rapidly with rainbow tables, turning this dump into a ready-made credential list for attackers. Unauthorized purchases, account hijacking, and identity fraud are all highly likely outcomes for victims whose data was recieved by criminal actors in this leak.

What Was Exposed in the Flores y Regalos en Bolivia Breach

• Email Address
• Password Hash

146,764 Bolivian Shoppers Now Exposed to Credential Attacks

Credential stuffing tools work by testing breached email and password combinations against dozens of platforms simultaneously. With 146,764 records in circulation, this breach gives attackers a partcularly broad attack surface. Victims face account takeover on any site where they reused their password, potential identity theft if attackers chain multiple data points, and financial fraud if payment methods are stored under the same credentials elsewhere.

How a Database Breach Works

A database breach occurs when an attacker finds a path into a website's data store, often through a SQL injection vulnerability, an exposed admin panel, or stolen server credentials. Once access is gained, the attacker exports user records including email addresses and password hashes, then packages them for sale or personal use. E-commerce platforms are frequent targets because user tables tend to contain valuable account and contact information tied to purchase histories.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches more than 400 billion records to check whether your email appeared in the Flores y Regalos en Bolivia breach or any other incident in our database. Run a free scan now and see what is already known about your accounts.