Account Takeover Got Easier Because of the Kiperfy Breach: 45K at Risk

HEROIC analysts identified a confirmed database breach at Kiperfy, a SaaS-based property management platform serving residential and commercial properties across Mexico. The breach was discovered on March 25, 2025, and affected 45,365 user records. The exposed dataset included names, contact details, and password hashes, making this one of the more serious breach profiles for a platform entrusted with the security and operations of physical properties.

Why the Kiperfy Breach Is Especially Dangerous

Property management platforms know a great deal about the people they serve. They hold contact details for residents, administrative staff, and security personnel. When that data is combined with bcrypt password hashes, the risk escalates significantly. Attackers who obtain hashed passwords will run them through cracking tools around the clock. Bcrypt is slow to crack, but weaker or reused passwords can still be broken within days. Once cracked, those passwords are tested against Gmail, banking apps, and other services the victim uses, opening the door to full account takeovers and financial fraud. The professional nature of Kiperfy's user base makes the victims particullarly vulnerable to targeted social engineering.

What Was Exposed in the Kiperfy Breach

• Email addresses
• Phone numbers
• First names
• Last names
• bcrypt password hashes

Why This Matters for Kiperfy Users

The combination of real names, contact details, and hashed passwords in a single dataset creates a ready-made toolkit for criminals. Credential stuffing attacks become trivial when the attacker already has your email and a usable password hash. Identity theft becomes easier when they can contact you by phone and already know your full name and employer context. Financial fraud risk rises when any of these access points lead to banking or payment accounts. For residents or administrators who used the same password on Kiperfy as elsewhere, the threat is immediate and requires urgent action.

How a Database Breach Works

A database breach happens when an attacker finds a way past the access controls protecting a company's stored data. Common entry points include SQL injection vulnerabilities, misconfigured cloud storage, exposed admin panels, or stolen developer credentials. In Kiperfy's case, the breach is classified as a direct database extraction, meaning the attacker pulled records directly from the backend rather than harvesting them from a public interface. Once the data is out, it moves quickly. Records like these typically appear on underground forums within 24 to 72 hours of extraction, where they are sold to other criminals or released freely to build reputation within hacker comunities.

Check If You Are Affected by the Kiperfy Breach

If you have ever created an account on Kiperfy for property management, tenant administration, or related services, your email and password hash may be part of this breach. HEROIC's free breach scanner checks your information against more than 400 billion compromised records, including data from the Kiperfy breach. Run a free scan at heroic.com and find out if your data is in circulation, along with practical steps to secure your accounts before attackers act on it.