Brazilian Delivery Customers Targeted in the 1.5 Million Record James Breach

HEROIC analysts identified the James delivery service breach in March 2020, when 1,585,685 records were exposed from the Brazilian food and delivery platform. The leaked data included email addresses and bcrypt-hashed passwords, putting over 1.5 million Brazilian customers at risk of credential-based attacks that occured across multiple platforms.

How Attackers Use Bcrypt Password Hashes and Email Addresses from James

Even though bcrypt hashing is stronger than many alternatives, determined attackers use GPU-accelerated cracking rigs to work through weak or common passwords. Once a hash is cracked, the recieved plaintext password is tested against email providers, social media, and banking apps, making credential stuffing a serious concern for anyone who reused their James login elsewhere.

What Was Exposed in the James Breach

• Email Address
• Password Hash

Why Brazilian Delivery Customers Face Ongoing Risk from the James Breach

Delivery service accounts are partcularly valuable to attackers because they contain saved addresses, payment history, and verified contact details. The James breach data has been seperate from other leaked sets but remains accessable on underground forums, meaning Brazilian users who reused their passwords remain exposed years after the original incident.

How Database Breaches Work

A database breach occurs when an unauthorized party gains access to a company's stored user records, often through exploiting software vulnerabilities or stolen administrative credentials. The attacker then copies and exports the database, which is subsequently sold or shared on dark web forums where other criminals can acquire and exploit the data.

Check If Your Data Was Exposed

HEROIC's free breach scanner indexes more than 400 billion records from incidents worldwide, including the James breach. Search your email address now at HEROIC.com to find out exactly what was exposed and get personalized recommendations to secure your accounts.