Privacy Unpacked

Confirmed breach

Estante Virtual data breach

BRBrazil · estantevirtual.com.br

A breach of Estante Virtual (Brazil) was added to Have I Been Pwned’s breach database on 29 November 2023. It affected 5,412,603 accounts. Exposed: Passwords and logins, Email addresses, Phone numbers, Dates of birth, Names and Addresses and more. The breach began on 28 February 2019, 1,735 days before it was reported.

If Estante Virtual had your data

  1. Look for Estante Virtual’s own notice or letter: it should say what of yours was involved. Keep it.
  2. Change your Estante Virtual password, and the same password anywhere else you use it. Turn on two-step sign-in.
  3. Expect scams that use your details: calls, texts or emails pretending to be Estante Virtual, your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.

One email to confirm first. We use your address only for this alert, and one click deletes it.

More breaches in Brazil

  1. ConvertrBRBrazil · 27 October 2026 Financial account and card detailsExpiration dateCVV code+2 –not reported
  2. Prefeitura de Feira de SantanaBRBrazil · 26 October 2026 Health and medical informationNames 1.2Kpeople
  3. Smart SampareportedBRBrazil · 20 October 2026 Passwords and loginsSurveillance dataCamera system data+3 –not reported
  4. HomeRefillBRBrazil · 3 October 2025 Passwords and loginsEmail addressesPhone numbers+2 187.5Kaccounts
  5. SpeedioreportedBRBrazil · 30 January 2025 Email addressesPhone numbersAddresses+1 27.5Maccounts

Every breach in Brazil →

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Found a mistake? Tell us and we correct it.