HEROIC Analysts Found TuRecarga Leaking 331K Personal Records

HEROIC analysts uncovered the TuRecarga breach, which occured in January 2020 and exposed 331,218 records from this Chilean mobile top-up platform. The leaked data included email addresses, phone numbers, full names, IP addresses, genders, and birthdays, creating a detailed personal profile on each affected user without a single password required to cause damage.

How Full Names, Phone Numbers, and Birthdays Enable Targeted Fraud

Without any passwords in this dataset, attackers instead have everything needed to impersonate victims, pass identity verification checks, and launch highly personalized phishing calls or messages. The combination of phone number and birthday is partcularly dangerous because many telecom carriers use these exact fields for SIM swap authentication, putting mobile accounts at direct risk.

What Was Exposed in the TuRecarga Breach

• Email Address
• Phone Number
• First Name
• Last Name
• IP Address
• Gender
• Birthday

Why the TuRecarga Breach Puts Chilean Users at Ongoing Risk

Personal records from a mobile financial platform are seperate from typical forum credential dumps in one critical way: they carry financial context. Attackers can use the exposed phone numbers and full names to conduct SIM swapping, account takeover, identity theft, and targeted financial fraud. This data has been recirculating across Telegram channels and breach forums, meaning the risk to affected users has not diminished since 2020.

How a Database Breach Works

A database breach occurs when an attacker gains unauthorized access to a platform's data storage systems, often by exploiting insecure API endpoints, misconfigured servers, or unpatched software. The extracted records are then published or sold on underground forums, where they are used individually or combined with other datasets to build detailed profiles for fraud.

Check If Your Data Was Exposed

HEROIC's free breach scanner draws from a database of over 400 billion records to check whether your email address was included in the TuRecarga breach or any other known incident. Run a free search at HEROIC to see exactly what data of yours may be circulating online.