A breach of HomeRefill (Brazil) was added to Have I Been Pwned’s breach database on 3 October 2025. It affected 187,457 accounts. Exposed: Passwords and logins, Email addresses, Phone numbers, Dates of birth and Names. The breach began on 2 April 2020, 2,010 days before it was reported.
Status
Confirmed breach
People affected
187,457 accounts
Reported
3 October 2025
Breach began
2 April 2020
Time to tell
2,010 days (the median in California’s notices over the last year: 154 days)
Look for HomeRefill’s own notice or letter: it should say what of yours was involved. Keep it.
Change your HomeRefill password, and the same password anywhere else you use it. Turn on two-step sign-in.
Expect scams that use your details: calls, texts or emails pretending to be HomeRefill, your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.
Privacy Unpacked