The Jorge Switch Breach Exposed Exactly 540 Customer Records

HEROIC analysts identified a database breach affecting Jorge Switch, a laptop and computer repair shop based in Panama, on August 15, 2024. The incident exposed 540 records containing email addresses, phone numbers, first names, and last names. While the record count is small, the personally identifiable information exposed is sufficient to enable targeted phishing, phone-based fraud, and social engineering attacks against the affected customers.

Why This Is Dangerous

A breach that combines full names, email addresses, and phone numbers gives attackers everything they need to impersonate the affected individuals or craft convincing fraudulent communications. Unlike generic spam campaigns, attackers armed with this data can address victims by their correct name, reference their known association with Jorge Switch, and send targeted messages that appear highly legitimate. Phone numbers also open the door to vishing calls and SMS phishing attacks that are much harder for recipients to detect as fraudulent.

What Was Exposed

• Email Address
• Phone Number
• First Name
• Last Name

Why This Matters

Contact information breaches are often underestimated in severity because no passwords or financial data are involved. However, full names paired with email addresses and phone numbers enable account recovery attacks, where attackers use the verified contact details to request password resets or impersonate victims with service providers. The data can also be aggregated with other breach records to build comprehensive profiles on individuals, increasing the risk of identity theft and fraud over time. For customers of a repair shop, device details and service history are also potential points of exploitation if attackers use the contact information to follow up with fraudulent service notices.

How Database Breaches Work

A database breach occurs when unauthorized parties gain access to the systems where a business stores customer records. Small businesses are frequent targets because they typically lack dedicated security teams or advanced monitoring tools. Common vulnerabilities include outdated software, weak or shared administrative passwords, and customer management systems that are internet-accessible without adequate access controls. Once the data is extracted, it tends to circulate on dark web forums where it is packaged with records from other breaches to create enriched contact lists used for fraud and phishing.

Check If You Are Affected

If you have ever had a device repaired at Jorge Switch or provided your contact details to the business, your personal information may be part of this breach. Use the HEROIC free breach scanner to check your email address against our database of 400 billion or more compromised records and find out whether your information has been exposed.