The Pasuyo Ai FoodMart Breach Put 795 User Records Online in 2022

In May 2022, Pasuyo Ai FoodMart, a Philippine-based food delivery app, experienced a database breach that exposed 795 user records. The incident recieved little attention at the time, but the data included bcrypt-hashed passwords alongside contact details and full names, creating real risk for affected users in the Philippines.

What Attackers Can Do With This Data

With email addresses, phone numbers, full names, and password hashes in hand, attackers can launch targeted phishing campaigns against affected users. The bcrypt hashes are not immediately crackable, but weak passwords are particulary vulnerable to offline dictionary attacks using tools that run millions of guesses per second.

What Was Exposed in the Pasuyo Ai FoodMart Breach

• Email Address
• Phone Number
• Password Hash
• First Name
• Last Name

Why This Breach Matters

Smaller food delivery platforms are often overlooked in breach reporting, but they collect the same sensitive contact data as major services. For users in the Philippines who may reuse passwords across banking or government apps, this breach creates a direct path to account takeover. The combination of phone numbers and full names makes social engineering attacks accessable to even low-skill threat actors.

How Database Breaches Work

A database breach occurs when an attacker gains unauthorized access to a backend data store, often through SQL injection, exposed credentials, or a misconfigured server. Once inside, they can dump entire tables containing user records. In this case, the Pasuyo Ai FoodMart database was extracted and circulated, exposing 795 accounts worth of personal and authentication data.

Check If Your Data Was Exposed

HEROIC's DarkWatch monitors over 400 billion breach records, including databases like this one from Pasuyo Ai FoodMart. Search your email address now to see if your credentials or personal data have been compromised in this or any other known breach.