Odonto Inside Breach: 381 Brazilian Dental Professional Records Exposed

HEROIC's DarkHive intelligence system discovered the Odonto Inside data breach, exposing 381 records from a Brazilian dental business consultancy platform in January 2023. The leaked data includes email addresses, phone numbers, names, IP addresses, and bcrypt password hashes, putting dental professionals and thier clients at risk from targeted cyberattacks.

Why This Is Dangerous

Although bcrypt is a stronger hashing algorithm than MD5 or SHA1, it does not make a breach harmless. Attackers who obtain bcrypt hashes can still run offline cracking attacks against weak passwords, and the combination of phone numbers, names, and IP addresses in this dataset creates serious risks independent of the password data. Dental professionals hold sensitive client information and handle healthcare-adjacent communications, making them high-value targets for social engineering and identity fraud schemes.

What Was Exposed

• Email Address
• Phone Number
• Password Hash (bcrypt)
• First Name
• Last Name
• IP Address

Why This Matters

Breaches targeting professional service providers like Odonto Inside can have cascading effects. Attackers who know a target is a dental professional can craft highly convincing phishing emails that impersonate insurance companies, dental supply vendors, or regulatory bodies. The IP addresses in this dataset reveal where users typically access the platform, which can help attackers identify thier workplace or home location. Credential stuffing using the exposed emails and cracked passwords can compromise accounts on platforms where users recieve professional communications or manage patient records.

How Database Leaks Work

Database breaches at small professional platforms often occur due to outdated software, unpatched vulnerabilities, or misconfigured access controls on backend servers. Attackers scan the internet continuously for exposed databases and once they find one, they can extract all records within seconds. The data is then packaged and posted to breach forums or sold to other criminals who specialize in using specific types of data, such as healthcare or professional records, to maximize the impact of attacks.

Check If You Are Affected

HEROIC offers a free identity scanner that searches over 400 billion records, including data from breaches like Odonto Inside. Visit heroic.com to scan your email address and find out if your information was exposed.