Brazilian Crowdfunding Platform APOIA.se Data Breach Exposes Over 450,000 Users

Summarize with:

ChatGPT Claude.ai Google AI Grok Perplexity

Add as preferred source on Google

The Brazilian crowdfunding platform APOIA.se suffered a significant data breach that exposed users' personal information, with more than 450,000 email addresses added today to the data breach notification service Have I Been Pwned (HIBP). 

The company acknowledged the incident in January 2026, a month after a database containing user records was posted on a popular online hacking forum.

Details of the Compromised User Data

The December 2025 APOIA.se data breach exposed a substantial dataset. Technical details of the breach and the number of affected individuals have not yet been disclosed. According to HIBP, the leak includes the platform's backers and creators:

• 450,800 unique email addresses, 
• full names, 
• physical addresses. 

Reports last month also suggested unique identifiers may have been exposed. These do not directly reveal which campaigns users supported or their interests or preferences without access to our protected internal systems, the company reportedly said in sent breach notification emails.

The company allegedly emphasized that sensitive information, such as payment data, was not exposed because partners with international security certification (PCI-DSS) processed the purchases. 

Cybersecurity for Crowdfunding Platforms

The Brazilian crowdfunding platform breach highlights how these sites have become attractive targets for cybercriminals due to the valuable personal and financial data they store. 

As crowdfunding continues to grow in popularity, platforms must prioritize implementing advanced security measures to protect user data from unauthorized access and prevent similar large-scale breaches in the future.

Related

Infostealer Evolves to Target AI Agents, OpenClaw Configurations

AI Agent Targets OSS Maintainers with Autonomous Pull Requests, Bypassing Human Detection

High-Severity Chrome 0-Day Vulnerability Enables Remote Code Execution

Cyber Job Moves: New Appointments Across Enterprise and Critical Infrastructure

Malicious Chrome Extensions: AiFrame Exploits AI Popularity, Another Steals Meta Business Suite Data

State-Backed Hackers Use Gemini AI for Cyberattacks Aimed at Cyber Espionage: Google Report

Your Weekly Cybersecurity Briefing

Get expert insights on threats, breaches, scams, and security trends — delivered every Monday.

Subscribe for Free

Please enter a valid email address.

Most Popular

Iran Faces Internet Shutdown Amid US Disagreement on VPN Funding

Infostealer Evolves to Target AI Agents, OpenClaw Configurations

AI Agent Targets OSS Maintainers with Autonomous Pull Requests, Bypassing Human Detection

High-Severity Chrome 0-Day Vulnerability Enables Remote Code Execution

Cyber Job Moves: New Appointments Across Enterprise and Critical Infrastructure

Malicious Chrome Extensions: AiFrame Exploits AI Popularity, Another Steals Meta Business Suite Data

Iran Faces Internet Shutdown Amid US Disagreement on VPN Funding

Infostealer Evolves to Target AI Agents, OpenClaw Configurations

AI Agent Targets OSS Maintainers with Autonomous Pull Requests, Bypassing Human Detection

High-Severity Chrome 0-Day Vulnerability Enables Remote Code Execution

Cyber Job Moves: New Appointments Across Enterprise and Critical Infrastructure

Malicious Chrome Extensions: AiFrame Exploits AI Popularity, Another Steals Meta Business Suite Data