The ImportaBR Leak: 126K Passwords Exposed. Yours Might Be One.

HEROIC analysts recieved and catalogued this breach in July 2020, when the ImportaBR database was exposed and 126,178 records were compromised. The leaked data included email addresses, password hashes, usernames, IP addresses, birthdays, and salts from this Brazilian transportation and logistics news platform.

Why Hashed Passwords and Birthdays Are Still Dangerous Together

When an attacker gets both password hashes and birthdays, they can use the birthday as a clue to crack the hash faster. MD5 hashes are partcularly weak against modern cracking tools, and even bcrypt hashes can fall when paired with personal context like birth dates and usernames that help narrow guesses.

What Was Exposed in the ImportaBR Breach

• Email Address
• Password Hash
• Username
• IP Address
• Birthday
• Salt

Why the ImportaBR Breach Still Puts Brazilians at Risk

This breach exposed professional-sector users from Brazil's transportation and logistics industry. Credential stuffing attacks using these email and password combinations can still occured against corporate portals, freight management systems, and logistics software where many users reuse the same passwords from 2020.

How a Database Breach Works

A database breach happens when attackers gain unauthorized access to a backend data store, often by exploiting unpatched software, weak credentials, or misconfigured server settings. Once inside, they export user tables containing account details and then sell or publish the data on dark web forums.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches across more than 400 billion compromised records to tell you instantly if your email appeared in the ImportaBR breach or any other known data leak. Run a free scan at HEROIC.com to find out now.