Mais Amigas Data Breach
The October 2022 Mais Amigas data breach occurred when unauthorized threat actors gained unauthorized access to the production MySQL database infrastructure of Mais Amigas (maisamigas.com.br), a major Brazilian direct-sales catalog, cosmetics, and apparel network.
Exposed Data Types
7- Email addresses
- Names
- Tax identification numbers
- Dates of birth
- Physical addresses
- Phone numbers
- Genders
About This Breach
The compromise exposed comprehensive personal identity, fiscal registry, contact, and ordering records for over 600,000 customers and direct-sales consultants across Brazil.
What information was affected in the Mais Amigas incident?
The leaked relational database export (maisamigas.sql) includes the client (cliente), address (endereco), phone (telefone), and transactional tables. The compromise affected 93,996 unique verified customer profiles, exposing the following categories of personal data:
- Fiscal & National Identity Details: Brazilian national taxpayer registry numbers (CPF - Cadastro de Pessoas Físicas).
- Personal Demographic Details: Full legal names (nome), dates of birth (dt_nascimento), marital status (estado_civil), and gender (sexo).
- Contact Credentials: Canonical email addresses and telephone numbers.
- Physical Geographic Data: Street addresses, neighborhood, city, state, and postal codes (CEP).
- Device & Telemetry Details: Unique device identifiers (id_dispositivo), account registration dates, and login timestamps.
How many accounts were affected?
Rigorous deduplication and RFC canonical validation confirmed 93,996 unique canonical email addresses across 603,796 total client profile records.
Technical analysis and security risks
The exposure represents a complete relational database dump of an active retail and reseller enterprise. The compromise of national CPF tax numbers in combination with birth dates and verified residential addresses exposes affected citizens to severe identity theft, fraudulent credit line originations, Pix transfer social engineering, and targeted phishing across WhatsApp and SMS.
Recommended actions for affected users
Consumers and resellers affiliated with Mais Amigas should:
- Regularly audit the Brazilian Central Bank's Registrato system and credit bureaus (Serasa/Boa Vista) for unauthorized credit checks or accounts opened in their name.
- Maintain extreme skepticism regarding unsolicited WhatsApp messages or phone calls requesting identity verification or payment receipts.
- Implement multi-factor authentication (MFA / 2FA) across all digital banking and primary communication channels.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
