Leon.CL Data Breach Exposes 393K Chilean E-Commerce Shopper Contact Records

HEROIC's DarkHive system discovered the Leon.CL breach, exposing 393,339 records in June 2025. This Chilean e-commerce platform suffered a database compromise that revealed user email addresses, phone numbers, first and last names belonging to Chilean online shoppers registered on this retail service, without exposing any password data.

Why This Is Dangerous

Chilean e-commerce platform breaches that expose contact databases with phone numbers and full names create complete identity profiles enabling targeted fraud against South American consumers whose personal data can be used for account recovery attacks and social engineering schemes impersonating local retailers. With nearly 400,000 records, this breach represents a large-scale exposure of Chilean consumer identity data that provides attackers with a comprehensive database of verified e-commerce users whose shopping behavior and contact details are confirmed. Chilean phone number databases are exploited for WhatsApp-based fraud campaigns and targeted phishing that impersonate local retailers, banks, and delivery services familiar to the affected consumers.

What Was Exposed

• Email Address
• Phone Number
• First Name
• Last Name

Why This Matters

Leon.CL shoppers whose data was exposed face identity theft and targeted phishing attacks using their confirmed phone numbers and email addresses to deliver convincing fraud schemes impersonating Chilean retailers, delivery services, and banking institutions. E-commerce user databases are particularly valuable for package delivery fraud schemes that use confirmed shopper identity to create convincing fake delivery notifications containing malicious links. Anyone whose data was exposed in this breach should be alert to unsolicited contact claiming to be from Leon.CL or related delivery and payment services.

How Database Breach Works

E-commerce platforms accumulate verified customer contact data from order registration and delivery address collection, building databases that combine shopping behavior context with personal identity and contact information. Attackers exploit web application security vulnerabilities in retail platform backends to extract customer contact databases. The resulting Chilean consumer contact data is incorporated into regional fraud campaigns targeting South American shoppers with delivery fraud schemes, fake return requests, and social engineering impersonating familiar local retail brands.

Check If You Are Affected

HEROIC offers a free identity scanner searching over 400 billion records including data from the Leon.CL breach. Visit heroic.com to check if your information was exposed.