La Diaria Data Breach: 402,393 Subscriber Records Exposed

Uruguay's Biggest News Platform Leaks 400,000+ Subscriber Records

La Diaria is Uruguay's leading independent news platform, known for its in-depth journalizm and strong subscriber base among the country's politically engaged population. In December 2024, a breach exposed 402,393 subscriber records -- one of the largest data exposures ever linked to a Uruguayan media outlet. The dataset included full names, email addresses, phone numbers, and physical addresses, creating a comprehensive profile of La Diaria's readership.

La Diaria (December 2024): Breach Summary

• Records Exposed: 402,393
• Data Types: Email addresses, phone numbers, first names, last names, physical addresses
• Breach Type: Database breach
• Password Exposure: None -- no password data was included in this breach
• Country: Uruguay
• Date Leaked: December 1, 2024

PII Without Passwords: Why 400,000 Records Still Matter

The absence of passwords in this breach is sometimes mistakenly interpreted as low severity. In reality, a dataset containing full names, emails, phone numbers, and physical addresses for 402,393 subscribors enables a sophisticated, multi-channel attack campaign that credential stuffing cannot replicate.

Spear phishing via email, SMS phishing (smishing), voice phishing (vishing), and even physical mail fraud all become viable with this combination of data. Attackers can address victims by name, reference their subscription to La Diaria, and craft convincing pretexts -- fake subscription renewal notices, account verification requests, or promotional offers -- that exploit the trust readers place in a publication they actively support.

The Political Dimension: Who Reads La Diaria

La Diaria's readership is not a generic cross-section of Uruguayan internet users. The platform is known for its in-depth coverage of poltical, social, and economic issues, and its subscriber base skews toward educated, politically engaged Uruguayans -- professionals, academics, civil servants, and activists. This demographic profile makes the breach particularly interesting to threat actors targeting Uruguay's civil society or political ecosystem.

Physical addresses in the dataset add another layer of risk: for journalists, political figures, and activists among the readership, having their home address linked to their email and phone number in a publicly circulating dataset represents a genuine personal safety concern beyond typical financial fraud risk.

Latin American Data Markets and the Spanish-Language Credential Ecosystem

Spanish-language breach data from Latin America has grown significantly in criminal marketplaces, driven by rising internet penetration and digital payment adoption across the region. Uruguay, with one of South America's highest internet penetration rates and a sophisticated banking and fintech ecosystem, represents a high-value target market.

Verified Uruguayan email addresses with phone numbers and physical addresses can be used for attacks against Uruguayan banking platforms (BROU, Scotiabank Uruguay, Itaú Uruguay), government services (BPS, DGI), and fintech platforms. The La Diaria breach provides a substantial, verified dataset of Uruguayan contacts that can be cross-referenced against these targets.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches across more than 400 billion exposed records, including large-scale Latin American media breaches like La Diaria. If you're a current or former subscriber, check whether your information is circulating in breach databases -- before someone uses it against you.