The Palmeiras Every Day Breach Happened in 2016, Still Circulating

HEROIC analysts identified a database breach affecting Palmeiras Every Day, a Brazilian fan forum for the football club Palmeiras, dating back to February 12, 2016. The exposed file contains 2,802 records, including email addresses, usernames, and passwords hashed with MD5.

Why the Palmeiras Every Day Breach Still Matters

Nearly a decade later, this data is still being traded on breach forums, often bundled with other old leaks. MD5 is a weak hashing method, and modern cracking tools can recover a large share of the original passwords from a breach this size, particularly for common or short passwords.

What Was Exposed in the Palmeiras Every Day Breach

• Email addresses
• Usernames
• Passwords (hashed with MD5)

Why This Matters

A small fan forum might seem like a low-risk target, but the login habits it exposes are not small at all. If you registered on Palmeiras Every Day and reused that email and password combination somewhere else, whoever cracks the hash can attempt to log into that other account directly. This is exactly how credential stuffing attacks work: automated tools testing stolen logins across many services at once.

How This Database Breach Happened

This breach fits the pattern of a direct database export, an attacker gaining access to the forum's backend and extracting the email addresses, usernames, and password hashes for every registered user in a single action. Choosing MD5 to protect those passwords made the data considerably easier to exploit, and its continued resale years later shows how long that exposure can last.

Check If You Are Affected

If you ever registered on Palmeiras Every Day, or you reuse passwords across fan forums and other sites, it's worth checking your exposure. HEROIC's free breach scanner searches a database of more than 400 billion leaked records, so you can find out where your email address has appeared and update any passwords that are still at risk.