The GumiBears Breach Happened in 2022. The Data Is Still Active.

In June 2022, GumiBears, a Chilean e-commerce platform, suffered a database breach that exposed 14,599 customer records. The data recieved little public attention at the time, but it has continued circulating in underground markets ever since. If you were a GumiBears customer, your personal information may still be accessable to bad actors today.

What Attackers Can Do With GumiBears Customer Data

Even without passwords, this breach hands attackers a ready-made list of real names tied to verified email addresses. That combination is partcularly useful for crafting convincing phishing emails, impersonation scams, and targeted spam campaigns that are hard to distinguish from legitimate messages.

What Was Exposed in the GumiBears Breach

• Email Address
• First Name
• Last Name

Why the GumiBears Breach Still Matters in 2025

Breaches from 2022 do not expire. Stolen records get bundled into larger data collections and resold repeatedly. Anyone whose name and email appeared in the GumiBears leak may find themselves on phishing lists, targeted ad fraud networks, or credential-testing operations that try those emails against other services they use.

How a Database Breach Works

A database breach occurs when an attacker gains unauthorized access to a website's backend data storage. This is often accomplished through SQL injection, exposed database credentials, or misconfigured server settings. Once inside, the attacker can copy an entire customer table in minutes. The GumiBears breach followed this pattern, resulting in a direct export of customer records from their e-commerce platform.

Check If Your Data Was Exposed

HEROIC DarkWatch monitors over 400 billion exposed records, including breach data from e-commerce platforms like GumiBears. Search your email address now to find out if your information is part of this or any other known data breach, and take action to protect your identity before attackers do.