← ARCHIVE / CASE-20190228-ESTANTEV
CASE FILE CASE-20190228-ESTANTEV

Estante Virtual

estantevirtual.com.br
CRITICAL
5,412,603 ACCOUNTS
FEB 2019 BREACH DATE
7 DATA TYPES
57mo DARK PERIOD

EVIDENCE FILE

CASE CONTEXT

This record summarizes the public breach profile for Estante Virtual: when it happened, when it surfaced publicly, the estimated exposure, and whether Have I Been Pwned currently marks it as verified. It is a plain-English view for quick risk review and source attribution — it keeps the source data visible, separates the public incident record from recovery advice, and collects nothing about you.

RISK REVIEW

The right response depends on what was exposed. The reported data classes here are Dates of birth, Email addresses, Names, Passwords, Phone numbers, Physical addresses, Usernames: email addresses and usernames can fuel phishing or account enumeration, profile data helps with impersonation, and financial or government identifiers warrant a closer fraud review. Have I Been Pwned currently marks this breach as verified, which means the service has reviewed the incident record against its source standards.

Because this breach includes password data, reused passwords should be replaced anywhere they appear. A unique password manager entry and multi-factor authentication are the safest follow-up steps. HIBP does not mark this breach as sensitive, but the exposed data can still matter if it helps attackers identify, profile, or credential-stuff affected users. For personal cleanup, start with password reuse, two-factor settings, and recovery-email security on the affected service. For research, treat this file as a source pointer and confirm exact impact against the original HIBP entry — the counts here describe the public record, not any one account.

DISCOVERY GAP

DISCOVERY GAPTime between breach occurrence and public disclosure
BREACH OCCURREDFEB 2019
4 years, 9 months dark
DATA SURFACEDNOV 2023

This breach went undetected for over 4 years. Data was actively in circulation during this window.

REDACTED EVIDENCE

PASSWORD DATA CLASSIFIED
████████████ ████████ ████████████████
████████████████████ ████████████ ████████

If this breach included passwords, treat them as compromised. If they were reused anywhere else, change them there too.

RELATED CASES - 2019