Hubla Data Breach Exposes 32K Brazilian Creator Economy Platform User Records

HEROIC's DarkHive system discovered the Hubla breach, exposing 32,428 records in July 2025. This Brazilian digital content and creator economy platform suffered a database compromise that revealed user email addresses, phone numbers, first and last names belonging to Brazilian content creators and subscribers registered on this creator monetization platform.

Why This Is Dangerous

Creator economy platform breaches expose contact databases combining phone numbers and full names with confirmed email addresses, enabling SIM swapping attacks and targeted fraud against content creators who often have significant social media followings and monetized audience relationships. Brazilian phone number databases are specifically exploited for WhatsApp-based fraud campaigns that impersonate financial services, platform support, and government agencies using confirmed identity details to appear legitimate. Content creator identity data from Brazilian platforms is valuable for social engineering attacks that exploit creator-audience trust relationships to defraud subscribers and sponsors.

What Was Exposed

• Email Address
• Phone Number
• First Name
• Last Name

Why This Matters

Hubla content creators and subscribers whose data was exposed face phishing attacks and SIM swap fraud attempts using their confirmed phone numbers and identity details to gain unauthorized access to banking, social media, and platform accounts. Brazilian phone number exposure enables WhatsApp phishing campaigns that reach victims directly on their primary messaging platform using personalized identity details that establish false legitimacy. Anyone whose data was exposed in this breach should monitor their phone account for unauthorized SIM changes and be alert to unsolicited contact claiming to be from Hubla or connected platforms.

How Database Breach Works

Creator economy platforms collect verified contact and identity data from both content creators and paying subscribers during account registration and payment processing, building databases that combine personal and financial context. Attackers exploit API security flaws and inadequate database access controls in creator platform backends to extract user contact databases. The resulting Brazilian phone number and identity data is incorporated into targeted WhatsApp fraud campaigns and SIM swapping operations against high-profile content creators and their audiences.

Check If You Are Affected

HEROIC offers a free identity scanner searching over 400 billion records including data from the Hubla breach. Visit heroic.com to check if your information was exposed.